Sekit CSF · Endpoint Security · Technical
RCF-0150EDR/anti-malware
EDR tools continuously monitor endpoint behaviour and automatically contain threats when detected
Mapping at a glance
RCF-0150EDR/anti-malwareEndpoint Security · Technical
RCF-0150 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.8.7Protection against malwaresupportsThe technical facet runs an EDR agent that watches behavior in real time and isolates threats automatically, the enforcement mechanism A.8.7 relies on.A.8.16Monitoring activitiessupportsAn EDR agent watching endpoint behavior in real time and containing threats automatically applies A.8.16's monitor-and-act objective to endpoints, one slice of the networks, systems and applications A.8.16 covers.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Endpoint protection console
The antivirus or advanced protection (EDR) tool installed on devices, and proof that it is deployed and up to date across the fleet.
From the Sekit evidence catalog
This topic through the other lenses
All Endpoint Security controls
Ask Sekura: “What evidence proves RCF-0150?”
Also via MCP, free with account