Building an Endpoint Security program from scratch
summary
Builds an endpoint program by first defining scope and assembling an asset inventory via agent, network or browser telemetry, then mapping threats and measurable goals, using a maturity model to spot gaps, and prioritizing riskiest users and devices. Recommends MDMs like Jamf and Intune, vendor POCs, diverse-user testing, three–five staged communications and staggered rollouts (start at 10% then 30% then 60%). Advocates device posture checks (device zero trust) and a rollback plan; most pilots succeed if testing and stakeholder commitments are enforced.
AI-written summary · about
chapters (15)
- 0:00Introduction to endpoint security
- 1:05Why endpoint security matters
- 2:28Defining endpoints clearly
- 3:11Determining program scope
- 4:53Identifying security threats
- 5:58Setting program goals
- 7:22Creating a maturity model
- 9:05Stakeholder management
- 11:14Execution step one asset inventory
- 13:00Execution step two prioritization
- 14:45Endpoint management basics
- 16:09Security tools and configuration
- 18:37Deployment and communication
- 20:22Device zero trust overview
- 21:43Key takeaways summary
related talks
11mDeveloping a Baseline Security Standard for Endpoint Devices
34mManaging the Mobile Endpoint Attack Surface
36m5 Steps to Drive Enterprise Software Security
57mKeynote: Maturing Your Application Security Program
18mYour Enterprise is Under Attack
38mBuilding a Security Assurance Program
29mBuilding a Security Operations Program
36mOvercoming Obstacles in Operationalizing Security