Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 CCM-UEM-05: Endpoint Management

What else in your programme already covers this

This control maps to 47 controls across 23 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ACSC Essential Eight · 5 controls

E8-APP-ML1 Application Control (ML1)
E8-MACRO-ML1 Configure Microsoft Office Macro Settings (ML1)
E8-MACRO-ML2 Configure Microsoft Office Macro Settings (ML2)
E8-UAH-ML1 User Application Hardening - Maturity Level 1
E8-UAH-ML2 User Application Hardening - Maturity Level 2

ASD Strategies to Mitigate Cyber Security Incidents · 4 controls

ASD37-04 User application hardening (Essential)
ASD37-11 Operating system hardening (Very Good)
ASD37-13 Control removable storage media (Very Good)
ASD37-30 Endpoint detection and response (Very Good)

UK Cyber Essentials · 4 controls

CE-MP.1 Anti-Malware Software Deployed
CE-MP.4 Application Allowlisting (Alternative)
CE-SC.1 Remove or Disable Unused Software
CE-SC.9 Device Unlocking Credentials and Brute-Force Protection

ANSSI Guide d'hygiene informatique (42 mesures, v2.0) · 3 controls

ANSSI-HYG-07 Authorise Network Connection Only for Managed Equipment
ANSSI-HYG-16 Use a Centralised Management Tool to Standardise Security Policies
ANSSI-HYG-33 Adopt Security Policies Dedicated to Mobile Terminals

Azure Security Benchmark · 3 controls

ASBv3-PA-6 Use privileged access workstations
ASBv3-PV-3 Define and establish secure configurations for compute resources
ES-1 Use Endpoint Detection and Response (EDR)

NIST SP 800-171 Rev 3 · 3 controls

03.01.18 Access Control for Mobile Devices
03.04.12 System and Component Configuration for High-Risk Areas
03.13.12 Collaborative Computing Devices and Applications

CIS Controls v8 · 2 controls

CIS-10.6 Centrally Manage Anti-Malware Software
CIS-4.6 Securely Manage Enterprise Assets and Software

CMMC 2.0 · 2 controls

AC.L2-3.1.18 Mobile Device Connection
CM.L2-3.4.2 Security Configuration Enforcement

FedRAMP High · 2 controls

AC-19 Access Control for Mobile Devices
CM-6 Configuration Settings

FedRAMP Moderate · 2 controls

AC-19 Access Control for Mobile Devices
CM-6 Configuration Settings

ISO 27001:2022 · 2 controls

7.9 Security of assets off-premises
8.1 User end point devices

ISO 27002:2022 · 2 controls

7.9 Security of assets off-premises
8.1 User endpoint devices

NIST SP 800-53 Rev 5 · 2 controls

NIST800-AC-19 AC-19 Access Control for Mobile Devices
NIST800-CM-6 CM-6 Configuration Settings

PCI DSS 4.0 · 2 controls

1.5.1 1.5.1 Security controls on dual-connected devices
5.3.5 5.3.5 Users cannot disable or alter anti-malware

Australia Consumer Data Right - Banking (CDR) · 1 control

AUCDR-IS-2 Secure the network and systems within the data environment

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1 · 1 control

UEM-05 Endpoint Management

HIPAA Security Rule · 1 control

164.310(c) Workstation Security (Standard)

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-PR.PS-01 Configuration management practices are established and applied

NIST SP 800-161 Rev 1 · 1 control

161R1-CM-6 Configuration Settings

NIST SP 800-172 · 1 control

3.1.2e Restrict Access to Organization-Owned, Provisioned, or Issued Information Resources

NIST SP 800-218 · 1 control

SP800-218-PO.5.2 Harden Development Endpoints

NIST SP 800-66 Rev 2 · 1 control

164.310(c) Workstation Security (Standard)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 have you already done?

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 CCM-UEM-05 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 your existing evidence covers. Hold NIST SP 800-53 Rev 5 and 140 of 197 Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 controls already carry evidence.

If you hold NIST SP 800-53 Rev 571.1% covered · 57 gaps If you hold FedRAMP Moderate60.4% covered · 78 gaps If you hold PCI DSS 4.060.4% covered · 78 gaps If you hold C5 (Germany)58.4% covered · 82 gaps If you hold ISO 27001:202256.3% covered · 86 gaps If you hold ISO 27002:202256.3% covered · 86 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 12 were rejected on the NIST SP 800-53 Rev 5 pair alone.

See the released pairs, $299 each Browse the graph free