Microsoft Defender for Business

Microsoft Defender for Business

5 Frameworks 4 TPRM

by Microsoft

Endpoint security for SMBs.

Pricing

Quote

Compliance

5

13 controls mapped

TPRM Resources

4

1 Trust

About Microsoft Defender for Business

Endpoint security for SMBs.

TPRM Resources

4 security & compliance resources

SOC 2

1

Trust

1

Compliance

2

Docs

Top Compliance Frameworks

PIC DSS

3 controls • 0 full, 0 partial

3

GDPR

3 controls • 0 full, 0 partial

3

HIPAA Security

3 controls • 0 full, 0 partial

3

COBIT

3 controls • 0 full, 0 partial

3

NIST 2.0

1 controls • 0 full, 0 partial

1

AI-Generated Suggestions

These compliance mappings are AI-generated suggestions, not validated assessments. They indicate potential relevance between this tool and compliance controls. Always verify with a qualified compliance professional before making audit decisions.

Total Controls

13

Frameworks

5

Full Coverage

0

Avg Confidence

68%

Control ID Title Coverage Confidence Actions
PCI-2575

Least Privilege Access (7.1.2)

Partial 70% Login
PCI-2625

Limiting Access to Cardholder Data (7.1)

Partial 65% Login
PCI-2677

Access Control System Restrictions (7.2)

Partial 60% Login
Control ID Title Coverage Confidence Actions
GV.PO-01

GV.PO-01: Policy for managing cybersecurity risks is established based on organizational context, cybersecurity strategy, and priorities and is communicated and enforced

Partial 70% Login
GV.PO-02

GV.PO-02: Policy for managing cybersecurity risks is reviewed, updated, communicated, and enforced to reflect changes in requirements, threats, technology, and organizational mission

Partial 65% Login
PR.AA-05

PR.AA-05: Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties

Partial 70% Login
Control ID Title Coverage Confidence Actions
164.308(a)(1)(ii)(A)

Conduct an accurate and thorough assessment of potential risks and vulnerabilities to the confidentiality, integrity, and availability of ePHI.

Partial 70% Login
HIPAA-3439

Identifying Vulnerabilities - In the past 12 months, has the practice performed (or caused to be performed) recommended tests to identify vulnerabilities?

Partial 70% Login
HIPAA-3471

Remediating Vulnerabilities - In the past 12 months, has the organization implemented remediation steps for identified 'critical' and 'important' vulnerabilities?

Partial 65% Login
Control ID Title Coverage Confidence Actions
24

Defines the scope of digital resilience testing.

Partial 70% Login
25

Details tools for vulnerability and performance testing.

Partial 65% Login
45

Encourages participation in threat intel sharing.

Partial 70% Login
Control ID Title Coverage Confidence Actions
ID.AM-1

Physical devices and systems within the organization are inventoried

Partial 70% Login

4

Total

1

Trust Center

1

Compliance

Trust Center & Security

1 resource

Compliance Certificates

1 resource

Documentation

2 resources

No reviews yet

Be the first to review Microsoft Defender for Business.

Edit Mapping Suggest Update

Claim This Listing