Controls

Digital Asset Inventory

All digital assets including software, domains, cloud resources, and IP addresses are discovered and maintained in a centralized asset management system.

Endpoint Security

Employee devices are configured with security baselines including disk encryption, firewall, antivirus, screen lock, strong passwords, and automatic security updates.

Patch Management

Operating systems and critical software on endpoints and servers are regularly updated with security patches. Critical patches are applied within defined SLAs.

Physical Asset Inventory

All physical assets such as laptops, phones, and equipment issued to employees are tracked in a centralized asset inventory system.

Server Hardening

Production servers are hardened with security controls including firewalls, intrusion detection, access restrictions, and automated threat prevention.