12.7: Deploy Network-Based Intrusion Prevention Systems

CSF v1.1 References:

DE.CM-1

Threats Addressed:

Lateral Movement

Group:

IG3

The next version of the control set incorporates all or part of this control into: 13.8: Deploy a Network Intrusion Prevention Solution.

Control Statement

Deploy network-based Intrusion Prevention Systems (IPS) to block malicious network traffic at each of the organization’s network boundaries.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]