Network Security
Identity, access management, and endpoint protection / EDR standards
Most security posture questions come down to two things: who can get in, and what happens on the endpoint when something gets through. Both are easy to answer loosely and hard to answer with proof.
This library asks for the proof.
What this library checks
- Multi-factor authentication coverage, including the accounts that are exempt and why
- Endpoint protection and EDR agent coverage against the asset inventory
- Detection policy configuration, exclusions and who can add one
- Administrative access model and whether standard users hold local admin
- Remote access paths into the environment, including vendor and support routes
- Firewall rule review, any-any rules and rules with no owner
- Alert triage process and what happens to a detection out of hours
Evidence you will be asked for
Every check in Spectra Core carries its own evidence. These are the artefacts an auditor, insurer or board most often wants to see for this area.
- MFA coverage report with the exception list and its approval
- EDR agent coverage percentage and the unprotected device list
- Firewall rule export with review date and reviewer
Where this usually goes wrong
Endpoint protection exclusions are where posture quietly degrades. Each one was added to fix a real problem and almost none of them are ever removed or reviewed.
Run this library against your environment
Every check comes with a risk level, a review frequency, an assignee and a plain-language rationale, so the output reads for leadership as well as for engineers.
Other libraries
Remote Monitoring & Management
Alerting, patching, agent health, and endpoint visibility standards
Network Environment
Switching, routing, Wi-Fi, DNS, and network segmentation checks
Active Directory Configuration
GPOs, OU structure, password policies, and domain hygiene
Microsoft 365 Security
Identity threat detection and response, conditional access, and tenant hardening
Backup & Disaster Recovery
On-premise DR systems and Microsoft 365 backup configuration checks
Server Rooms
Physical environment, cooling, fire suppression, and monitoring standards