CIS Controls v8 CIS-4.10: Enforce Automatic Device Lockout on Portable End-User Devices

What else in your programme already covers this

This control maps to 32 controls across 16 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

FedRAMP High · 4 controls

AC-11 Device Lock
AC-19 Access Control for Mobile Devices
AC-7 Unsuccessful Logon Attempts
CM-2(7) Configure Systems and Components for High-Risk Areas

FedRAMP Moderate · 4 controls

AC-11 Device Lock
AC-19 Access Control for Mobile Devices
AC-7 Unsuccessful Logon Attempts
CM-2(7) Configure Systems and Components for High-Risk Areas

ISO 27001:2022 · 3 controls

7.9 Security of assets off-premises
8.1 User end point devices
8.5 Secure authentication

ISO 27002:2022 · 3 controls

7.9 Security of assets off-premises
8.1 User endpoint devices
8.5 Secure authentication

NIST SP 800-53 Rev 5 · 3 controls

NIST800-AC-11 AC-11 Device Lock
NIST800-AC-19 AC-19 Access Control for Mobile Devices
NIST800-AC-7 AC-7 Unsuccessful Logon Attempts

CMMC 2.0 · 2 controls

AC.L2-3.1.10 Session Lock
AC.L2-3.1.8 Unsuccessful Logon Attempts

HIPAA Security Rule · 2 controls

164.310(c) Workstation Security (Standard)
164.312(a)(2)(iii) Automatic Logoff (Addressable)

NIST SP 800-66 Rev 2 · 2 controls

164.310(c) Workstation Security (Standard)
164.312(a)(2)(iii) Automatic Logoff (Addressable)

UK Cyber Essentials · 2 controls

CE-SC.5 Password-Based Authentication Quality
CE-SC.9 Device Unlocking Credentials and Brute-Force Protection

ANSSI Guide d'hygiene informatique (42 mesures, v2.0) · 1 control

ANSSI-HYG-33 Adopt Security Policies Dedicated to Mobile Terminals

Australian Information Security Manual · 1 control

ISM-1403 Account lockout after failed logons

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 1 control

CCM-UEM-06 Automatic Lock Screen

NIST SP 800-171 Rev 3 · 1 control

03.01.08 Unsuccessful Logon Attempts

PCI DSS 4.0 · 1 control

8.3.4 8.3.4 Lockout after 10 attempts for 30 minutes

SOC 2 · 1 control

SOC2-CC6.1 CC6.1 Logical access security over protected information assets

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of CIS Controls v8 have you already done?

CIS Controls v8 CIS-4.10 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of CIS Controls v8 your existing evidence covers. Hold ISO 27001:2022 and 102 of 153 CIS Controls v8 controls already carry evidence.

If you hold ISO 27001:202266.7% covered · 51 gaps If you hold FedRAMP Moderate62.7% covered · 57 gaps If you hold NIST SP 800-53 Rev 557.5% covered · 65 gaps If you hold NIST Cybersecurity Framework 2.050.3% covered · 76 gaps If you hold ISO 27002:202249.7% covered · 77 gaps If you hold Azure Security Benchmark49% covered · 78 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 240 were rejected on the ISO 27001:2022 pair alone.

See the released pairs, $299 each Browse the graph free