Endpoint & XDR · Security Programs
Microsoft Defender for Endpoint for NIST Cybersecurity Framework 2.0
What Microsoft Defender for Endpoint’s data evidences toward NIST Cybersecurity Framework 2.0 today, and how to connect it.
Coming soon
What Microsoft Defender for Endpoint evidences here
- Incidents & alerts feeds Detect (DE)
This is where Microsoft Defender for Endpoint’s data is documented as relevant on our NIST Cybersecurity Framework 2.0 page — not a pre-built, automatic control mapping. You configure which controls it maps to inside CMDash.
How you connect Microsoft Defender for Endpoint
Onboarded devices, alerts, and software vulnerabilities from Defender for Endpoint, mapped to endpoint and vulnerability-management controls.
About NIST Cybersecurity Framework 2.0
The current CSF, including the GOVERN function. Used as the hub other frameworks crosswalk through, so evidence you map once counts in more than one place.