{"version":"0.2.0","built_at":"2026-10-10T20:58:14.188Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","capability":{"id":"BC-760.40","name":"Infrastructure & Endpoint Protection","level":2,"parent_id":"BC-760","l1_id":"BC-760","industry":"cross-industry","macro_id":"MC-70","path":["Cybersecurity","Infrastructure & Endpoint Protection"],"description":"Reduce the attack surface of servers, networks, cloud environments and devices by finding weaknesses, closing them on a schedule and hardening what remains.","aliases":["Vulnerability Management","Endpoint Security","Network Security"],"in_scope":["Vulnerability scanning and remediation tracking","Endpoint protection and device hardening","Network security controls and segmentation policy","Cloud security posture management"],"out_of_scope":["Operating the networks and servers themselves (see BC-730)","Device provisioning and support (see BC-780)"],"csdm_note":null,"status":"active","successor_id":null,"child_ids":["BC-760.40.10","BC-760.40.20","BC-760.40.30","BC-760.40.40"]},"crosswalk":{"realized_by":[{"product_id":"PR-140","product":"Microsoft 365","pc_id":"PC-140.60","pc":"Microsoft Intune","maturity":"strong","via":null},{"product_id":"PR-140","product":"Microsoft 365","pc_id":"PC-140.90","pc":"Microsoft Defender","maturity":"partial","via":null},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.30","pc":"Adaptive Multi-Factor Authentication","maturity":"core","via":null}],"used_in":[],"patterns":[{"id":"DP-340","name":"Zero Trust","category":"Security","via":"BC-760.40.30"},{"id":"DP-430","name":"Service Mesh","category":"Cloud","via":"BC-760.40.30"}],"stacks":[],"books":[{"id":"BK-building-secure-and-reliable-systems","title":"Building Secure and Reliable Systems","topic":"Security","via":null},{"id":"BK-zero-trust-networks","title":"Zero Trust Networks","topic":"Security","via":null}]},"ancestors":[{"id":"BC-760","name":"Cybersecurity","level":1}],"children":[{"id":"BC-760.40.10","name":"Vulnerability Management","level":3,"child_count":0},{"id":"BC-760.40.20","name":"Endpoint Protection","level":3,"child_count":0},{"id":"BC-760.40.30","name":"Network Security Controls","level":3,"child_count":0},{"id":"BC-760.40.40","name":"Cloud Security Posture","level":3,"child_count":0}]}