Endpoints have appropriate protections to prevent attacks on memory.
Specification
Endpoint OS needs to have Address Space Layout Randomization (ASLR) enabled.
Endpoint OS needs to use executable-space protection, preferably through hardware NX-bits. DEP is enabled for Windows.
ISO 27001 & 27002:2022
A5.3, A5.8, A5.15, A5.16, A5.17, A5.18, A8.3
SURF toetsingskader informatiebeveiliging (NBA-volwassenheidsmodel)
SM.02 Authentication mechanisms
SM.03 Mobiele apparaten en telewerken