Sekit CSF · Endpoint Security · Process
RCF-0149EDR/anti-malware
Endpoint protection tools are consistently deployed, updated and alerts are investigated promptly
Mapping at a glance
RCF-0149EDR/anti-malwareEndpoint Security · Process
RCF-0149 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022 · Annex A controls
Curated mapping with the reasoning, not just the codes.
A.8.7Protection against malwaresupportsThe process facet keeps endpoint protection installed and current on every device and investigates its alerts within an agreed timeframe.A.8.16Monitoring activitiessupportsKeeping endpoint protection current and investigating its alerts within an agreed timeframe operationalizes the monitoring response A.8.16 requires.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Endpoint protection console
The antivirus or advanced protection (EDR) tool installed on devices, and proof that it is deployed and up to date across the fleet.
From the Sekit evidence catalog
This topic through the other lenses
All Endpoint Security controls
Ask Sekura: “What evidence proves RCF-0149?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.