Security Controls – High-Severity VMware Vulnerability Exploited as Zero-Day

🛡️ Security Controls

Relevant security controls from major frameworks:

CIS Critical Security Controls® v8.0

10.110.513.213.314.2

Hide Control Details (5 controls)▲

10.1Deploy and Maintain Anti-Malware Software

DevicesProtect

Deploy and maintain anti-malware software on all enterprise assets.

10.5Enable Anti-Exploitation Features

DevicesProtect

Enable anti-exploitation features on enterprise assets and software, where possible, such as Microsoft® Data Execution Prevention (DEP), Windows® Defender Exploit Guard (WDEG), or Apple® System Integrity Protection (SIP) and Gatekeeper™.

13.2Deploy a Host-Based Intrusion Detection Solution

DevicesDetect

Deploy a host-based intrusion detection solution on enterprise assets, where appropriate and/or supported.

13.3Deploy a Network Intrusion Detection Solution

NetworkDetect

Assess service providers consistent with the enterprise’s service provider management policy. Assessment scope may vary based on classification(s), and may include review of standardized assessment reports, such as Service Organization Control 2 (SOC 2) and Payment Card Industry (PCI) Attestation of Compliance (AoC), customized questionnaires, or other appropriately rigorous processes. Reassess service providers annually, at a minimum, or with new and renewed contracts.

14.2Train Workforce Members to Recognize Social Engineering Attacks

N/AProtect

Train workforce members to recognize social engineering attacks, such as phishing, pre-texting, and tailgating.

Attribution

License
This product/service incorporates the CIS Critical Security Controls® with the express permission of the Center for Internet Security, Inc. Use of the CIS Controls in this commercial offering is authorized under a commercial license granted by CIS.

Trademark Notice
"CIS®" and "CIS Critical Security Controls®" are registered trademarks of the Center for Internet Security, Inc. and are used under license.

Source Reference
The original CIS Critical Security Controls are available, free of charge for non-commercial use, at: https://www.cisecurity.org/controls.

Disclaimer
CIS does not endorse, certify, or warrant this product/service. Any views or interpretations are those of Paranoid Cybersecurity, not CIS.