Sekit CSF · Endpoint Security · Policy
RCF-0148EDR/anti-malware
The company formally requires endpoint detection and response or anti-malware protection on all devices
Mapping at a glance
RCF-0148EDR/anti-malwareEndpoint Security · Policy
RCF-0148 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.1Policies for information securitysupportsSekit's EDR/anti-malware policy, one of the topic-specific policies A.5.1 expects, requires approved endpoint protection on every company device that nobody may disable.A.8.7Protection against malwaresupportsThis policy facet requires approved endpoint protection on every device that nobody may disable, the written commitment behind A.8.7's malware defense.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Endpoint protection console
The antivirus or advanced protection (EDR) tool installed on devices, and proof that it is deployed and up to date across the fleet.
From the Sekit evidence catalog
This topic through the other lenses
All Endpoint Security controls
Ask Sekura: “What evidence proves RCF-0148?”
Also via MCP, free with account