GRCLibrary.ai

Standard

Endpoint Hardening Standard

This standard defines the hardening baseline for endpoints used in the organization's environment. It covers managed workstations and laptops on all major operating systems, mobile devices, and the BYOD posture for unmanaged personal devices that access organizational resources. The standard is the technical companion to the endpoint management procedure (which governs operations) and the BYOD policy (which governs scope).

Type
Standard
Version
1.2.1
Date
2026-10-16
Owner
Chief Information Security Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Information Security
Review frequency
Annual and upon material change to OS platforms, threat-actor tradecraft, or hardware capabilities
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • 1. Purpose
  • 2. Scope
  • 3. Identity and authentication
  • 4. Device integrity
  • 5. Software and configuration
  • 6. Endpoint detection and response
  • 7. Data protection
  • 8. Network and connectivity
  • 9. Privileged access workstations (PAW)
  • 10. Developer workstations
  • 11. BYOD and unmanaged devices
  • 12. Mobile devices
  • 13. Kiosks and shared devices
  • 14. Lifecycle and disposal
  • 15. Operating expectations
  • 16. Framework alignment
  • 17. Limitations

Frameworks it maps to

Related documents