QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Making Ardenmoor Insurance Group's endpoint hardening baseline defensible to its regulator after finding F-3 showed the board's 98 per cent compliant figure tested 40 of 212 settings and left out 1,900 of 14,600 devices the tooling could not see; the honest denominator, from 1,900 unseen devices to 144, with critical compliance at 95.8 per cent of 14,482; and the eight-layer defence stack — firmware and boot, OS configuration, identity and privilege, application control, attack surface, logging, drift detection, and evidence and exceptions — on which the settings with complete evidence in the Compliance Evidence Register climb from 18 to all 212.
CY-EXPERT-101Expert Level · Endpoint Security

Hardening Baseline Defensibility

An expert-level course on making an endpoint hardening baseline something an organisation can defend to a regulator or auditor: grounded in a recognised benchmark, tailored with recorded reasons, measured across the whole fleet every day, and honest about what it cannot see and what it has excepted. Build the defence stack - eight layers from firmware and boot at the foundation, through OS configuration, identity and privilege, application control, attack-surface reduction, logging and drift detection, to evidence and exceptions at the top - and assemble a compliance evidence register that someone else can re-perform.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Rebuild a compliance figure from its numerator, denominator, scope and date, reconcile the inventory with the tooling, and measure the boot layer with unseen devices counted.
  • Ground every baseline setting in a benchmark crosswalk, record every deviation with its reason, tier the baseline by role and measure effective configuration.
  • Name critical settings against criteria fixed in advance, measure identity and credential protection on the device, and replace annual sampling with daily measurement.
  • Move application control from audit to enforcement, close coverage gaps in hidden device populations, and report enforced, audited and absent honestly.

Price:৳12,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.