GRCLibrary.ai

Procedure

Endpoint Management and Device Compliance Procedure

To ensure that all organizational endpoints, including workstations, laptops, servers, and mobile devices, are enrolled, hardened, continuously monitored, and maintained in a compliant state throughout their operational lifetime, reducing the risk of compromise arising from misconfiguration, unpatched software, or unsanctioned devices accessing corporate resources.

Type
Procedure
Version
1.7.1
Date
2026-10-16
Owner
Chief Information Security Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Operations
Review frequency
Annual and upon material platform or regulatory change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • 1. Purpose and scope
  • 2. Governance
  • 3. Device inventory and asset management
  • 4. Endpoint protection deployment
  • 5. Configuration compliance
  • 6. Conditional access enforcement
  • 7. Patch and vulnerability management for endpoints
  • 8. Mobile and BYOD devices
  • 9. Decommissioning and disposal
  • 10. Metrics
  • 11. Framework alignment

Frameworks it maps to

Related documents