Topic

Host-based intrusion detection and response

Applicable to

Non Classified, Official, Protected, Secret, Top Secret

History

Priority

should

Mar 2025

A HIPS or EDR solution is implemented on workstations.

The existing control recommending that a HIPS is implemented on workstations was amended to specify that either a HIPS or Endpoint Detection and Response (EDR) solution can be used.

2015

HIPS should be used within SOEs.