This public preview runs a real quantitative simulation (FAIR methodology, Monte Carlo) — not a canned demo result.
Multi-factor authentication for privileged and non-privileged accounts
System monitoring (EDR / endpoint telemetry)
Boundary protection / network segmentation
System backup, tested for successful restoration
Incident response plan, tested in the last 12 months
Security awareness training program
Vulnerability monitoring and scanning
Protection of information at rest
External system services (vendor risk management)
Audit record review, analysis, and reporting
Account management (provisioning, review, deprovisioning)
MFA required for externally-exposed applications
Centralized security event alerting / EDR deployment
Secure network architecture established and maintained
Data recovery process established and maintained
Personnel designated to manage incident handling
Security awareness program, run at least annually
Vulnerability management process with defined remediation SLAs
Encrypt sensitive data at rest
Inventory of service providers established and maintained
Centralized audit log collection
Formal access-granting process for new accounts
Secure log-on procedures (MFA)
Protection from malware (EDR / anti-malware)
Network security management / segregation
Information backup
Management of information security incidents
Information security awareness, education and training
Technical vulnerability management
Cryptographic controls
Information security in supplier relationships
Logging and monitoring
User access management lifecycle
0 of 33 controls answered