Please enable JavaScript.

Coggle requires JavaScript to display documents.

IMPLEMENTING MICROSOFT DEVICE GUARD FOR ISO 27001, PCI, AND FEDRAMP…

- - - - ISO 27001: 2013
        
        A.12.2.1 - Controls Against Malware
        
        A.12.4.1 - Event Logging
        
        A.12.4.2 - Protection of Log Information
        
        A.12.4.3 - Administrator and Operator Logs
      - PCI DSS 3.2
        
        5.1 - Anti-Virus Software
        
        5.1.1 - Anti-Virus Software - Detection and Prevention
        
        5.2 - Anti-Virus Software - Updates and Monitoring
        
        10.2.7 - Audit Object Actions
        
        10.3 - Audit Trail
        
        10.3.1 - Audit Trail - User Identification
        
        10.3.2 - Audit Trail - Event Type
        
        10.3.3 - Audit Trail - Date and Time
        
        10.3.4 - Audit Trail - Success or Failure
        
        10.3.5 - Audit Trail - Event Origination
        
        10.3.6 - Audit Trail - Component, Resource, Data Identity
        
        10.5 - Audit Trail Protection
        
        10.5.2 - Audit Trail Protection - Prevent Unauthorized Modification
      - FedRAMP; NIST 800-53 Revision 4
        
        AU-2 - Audit Events
        
        AU-3 - Content of Audit Records
        
        AU-9 - Protection of Audit Information
        
        AU-12 - Audit Generation
        
        CM-7 (5) - Least Functionality | Authorized Software / Whitelisting
        
        SI-3 - Malicious Code Protection
        
        SI-3 (1) - Malicious Code Protection | Central Management
    - - ISO 27001: 2013
        
        A.12.2.1 - Controls Against Malware
        
        A.12.5.1 - Installation of Software on Operational Systems
        
        A.14.1.2 - Securing Application Services on Public Networks
        
        A.14.1.3 - Protection of Application Services Transactions
      - PCI DSS 3.2
        
        2.2 - System Configuration Settings and Hardening
        
        2.2.2 - Enable Only Necessary Services, Protocols, Daemons
        
        2.2.3 - Enable Additional Control for Insecure Services, Protocols, Daemons
        
        2.2.4 - Configure System to Prevent Misuse
        
        2.2.5 - Remove Unnecessary System Functionality
        
        5.1 - Anti-Virus Software
        
        5.1.1 - Anti-Virus Software - Detection and Prevention
        
        5.2 - Anti-Virus Software - Updates and Monitoring
        
        5.3 - Anti-Virus Software - Prevent Disablement or Alteration
        
        6.5.2 - Buffer Overflows
        
        11.5 - Change Detection Mechanism
      - FedRAMP; NIST 800-53 Revision 4
        
        AC-4 - Information Flow Enforcement
        
        AC-6 (10) - Least Privilege | Prohibit Non-Privileged Users from Executing Privileged Functions
        
        CM-2 - Baseline Configuration
        
        CM-5 (3) - Access Restrictions for Change | Signed Components
        
        CM-6 - Configuration Settings
        
        CM-7 - Least Functionality
        
        CM-7 (2) - Least Functionality | Prevent Program Execution
        
        CM-7 (5) - Least Functionality | Authorized Software / Whitelisting
        
        CM-8 (3) - Information System Component Inventory | Automated Unauthorized Component Detection
        
        SC-4 - Information in Shared Resources
        
        SC-5 - Denial of Service Protection
        
        SC-39 - Process Isolation
        
        SI-3 - Malicious Code Protection
        
        SI-3 (1) - Malicious Code Protection | Central Management
        
        SI-6 - Security Verification
        
        SI-7 - Software, Firmware, and Information Integrity
        
        SI-10 - Information Input Validation
        
        SI-16 - Memory Protection