CSC V7 control 7.10 – Sandbox All Email Attachments
Overview CSC V7 control 7.10 recommends that organisations “Use sandboxing to analyze and block inbound email attachments with malicious behavior....
- Home
- Frameworks and Standards
- CIS Critical Security Controls V7
CIS Critical Security Controls V7
CSC V7 control 10 – Data Recovery Capabilities
Overview CSC V7 control 10 recommends that organisations “ Note CSC V7 places this control in the category of “Data...CSC V7 control 8 – Malware Defenses
Overview CSC V7 control 8 recommends that organisations “ Note CSC V7 places this control in the category of “Malware...CSC V7 control 8.1 – Utilize Centrally Managed Anti-malware Software
Overview CSC V7 control 8.1 recommends that organisations “Utilize centrally managed anti-malware software to continuously monitor and defend each of...CSC V7 control 8.2 – Ensure Anti-Malware Software and Signatures are Updated
Overview CSC V7 control 8.2 recommends that organisations “Ensure that the organization’s anti-malware software updates its scanning engine and signature...CSC V7 control 8.3 – Enable Operating System Anti-Exploitation Features/ Deploy Anti-Exploit Technologies
Overview CSC V7 control 8.3 recommends that organisations “Enable anti-exploitation features such as Data Execution Prevention (DEP) or Address Space...CSC V7 control 8.4 – Configure Anti-Malware Scanning of Removable Devices
Overview CSC V7 control 8.4 recommends that organisations “Configure devices so that they automatically conduct an anti-malware scan of removable...CSC V7 control 8.5 – Configure Devices Not To Auto-run Content
Overview CSC V7 control 8.5 recommends that organisations “Configure devices to not auto-run content from removable media. Note CSC V7...CSC V7 control 8.6 – Centralize Anti-malware Logging
Overview CSC V7 control 8.6 recommends that organisations “Send all malware detection events to enterprise anti-malware administration tools and event...CSC V7 control 8.7 – Enable DNS Query Logging
Overview CSC V7 control 8.7 recommends that organisations “Enable Domain Name System (DNS) query logging to detect hostname lookups for...