awayer.blogg.se

9.4: Restrict Unnecessary or Unauthorized Browser and Email Client Extensions.

9.3: Maintain and Enforce Network-Based URL Filters.

9.1: Ensure Use of Only Fully Supported Browsers and Email Clients.

4: Secure Configuration of Enterprise Assets and Software.

2: Inventory and Control of Software Assets.

1: Inventory and Control of Enterprise Assets.

9.7: Deploy and Maintain Email Server Anti-Malware Protectionsĭeploy and maintain email server anti-malware protections, such as attachment scanning and/or sandboxing. 9.6: Block Unnecessary File Typesīlock unnecessary file types attempting to enter the enterprise's email gateway.

To lower the chance of spoofed or modified emails from valid domains, implement DMARC policy and verification, starting with implementing the Sender Policy Framework (SPF) and the DomainKeys Identified Mail (DKIM) standards. Restrict, either through uninstalling or disabling, any unauthorized or unnecessary browser or email client plugins, extensions, and add-on applications. 9.4: Restrict Unnecessary or Unauthorized Browser and Email Client Extensions Enforce filters for all enterprise assets. Example implementations include category-based filtering, reputation-based filtering, or through the use of block lists. 9.3: Maintain and Enforce Network-Based URL FiltersĮnforce and update network-based URL filters to limit an enterprise asset from connecting to potentially malicious or unapproved websites. Use DNS filtering services on all enterprise assets to block access to known malicious domains. Subcontrols 9.1: Ensure Use of Only Fully Supported Browsers and Email ClientsĮnsure only fully supported browsers and email clients are allowed to execute in the enterprise, only using the latest version of browsers and email clients provided through the vendor. Improve protections and detections of threats from email and web vectors, as these are opportunities for attackers to manipulate human behavior through direct engagement.