ISO 27001 Compliance Software

ISO 27001:2022 Controls:

• 7.10 Storage media
• A.8.12 Data Leakage Prevention
• 8.16 Monitoring activities
• 6.3 Information Security Awareness, Education, and Training
  

ISO 27001:2013 Controls:

Annex A.8.3 — Media Handling
A.8.3.1 Management of Removable Media

Annex A.8.3 is about media handling. The objective in this Annex is to prevent unauthorized disclosure, modification, removal or destruction of information stored on media.

AccessPatrol

• Prevent the use of unauthorized removable media devices
• Restrict file transfers to removable media devices
• Get alerts when unknown or blocked removable media is inserted into managed endpoints
• Monitor removable media activity for security policy violations
• Maintain an audit trail of every removable media device that is inserted into managed endpoints
• Maintain an audit trail of file operations executed from portable storage devices
• Display a custom warning message when your users’ insert removable media devices into their computers
• Track file transfers to portable storage, cloud services, apps, and more

ISO 27001:2022 Controls:

• 8.15 Logging
• 8.16 Monitoring activities
• 8.19 Installation of Software on Operational Systems

ISO 27001:2013 Controls:

Annex A.12.1 — Operations Security

A.12.4 — Logging and Monitoring
A.12.6.2 Restrictions on Software Installation

Annex A.12.1 is about Operational Procedures and Responsibilities. The objective of A.12.1 is to ensure the secure operation of information processing facilities.

Annex A.12.4 is about logging and monitoring. The objective in this Annex A area is to record events and generate evidence.

AccessPatrol

• Get alerts when unknown or blocked removable media is inserted into managed endpoints
• Monitor removable media activity for security policy violations
• Maintain an audit trail of every removable media device that is inserted into managed endpoints
• Maintain an audit trail of file operations executed from portable storage devices

BrowseControl

• Prevent employees from launching specific Windows applications

BrowseReporter

• Monitor application usage to detect unauthorized software (shadow IT)
• Maintain a log of each website visited and application used

enPowerManager

• Maintain a log of user logon and logoff times
• Maintain a log of PC power events (startup, shutdown, sleep)

8.12 Data Leakage Prevention (DLP)

ISO 27002 control 8.12 modifies risk by implementing technical measures that proactively detect and prevent the disclosure and/or extraction of information.

AccessPatrol

• Block data transfers to portable storage devices to prevent data leakage
• Maintain a log of each removable media device used
• Get alerts of attempts to use unauthorized removable media devices
• Maintain an audit trail of every file operation to removable media devices

BrowseControl

• Disable unneeded TCP/UDP ports at the endpoint level to reduce the attack surface of ICT systems
• Prevent users from launching applications that are known to be a risk to sensitive data such as cloud storage apps
• Restrict browser access to authorized websites and intranet portals to prevent the introduction of malicious code from high-risk websites
• Block known malicious domains and internet-based data egress points such as cloud storage sites with predefined web content categories

BrowseReporter

• Get alerts when users attempt to visit known high-risk websites
• Monitor user computer activity for high-risk web browsing or app usage

Learn More: CurrentWare’s data loss prevention solutions