Controls

Terug naar overzicht
Version

SB.7.004 Memory protection

Endpoint Security
Medium
Medium
Medium
Organisation
v2.0 (Q1 2024)

Description

Endpoints have appropriate protections to prevent attacks on memory.

Specification

Endpoint OS needs to have Address Space Layout Randomization (ASLR) enabled.

Endpoint OS needs to use executable-space protection, preferably through hardware NX-bits. DEP is enabled for Windows.