RFC 7632: Endpoint Security Posture Assessment: Enterprise Use Cases

In plain English — editorial summary, not part of the RFC

This memo documents a sampling of use cases for securely aggregating configuration and operational data and evaluating that data to determine an organization's security posture. From these operational use cases, we can derive common functional capabilities and requirements to guide development of vendor-neutral, interoperable standards for aggregating and evaluating data relevant to security posture.

Document record

Document ID

RFC7632

Published

September 2015

Authors

D. Waltermire; D. Harrington

Status

INFORMATIONAL

Stream

IETF

Area

sec

Pages

23

Also known as

—

• Read the full RFC text →
• Plain text version
• IETF Datatracker history
• DOI: 10.17487/RFC7632

Topics

• security automation
• continuous monitoring
• endpoint
• posture assessment
• use case
• asset management
• configuration management
• vulnerability management
• content management

Related documents

Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.

• RFC 8248Security Automation and Continuous Monitoring (SACM) RequirementsCurrent

  September 2017

• RFC 8322Resource-Oriented Lightweight Information Exchange (ROLIE)Current

  February 2018

• RFC 6813The Network Endpoint Assessment (NEA) Asokan Attack AnalysisCurrent

  December 2012

• RFC 8926Geneve: Generic Network Virtualization EncapsulationCurrent

  November 2020

• RFC 8939Deterministic Networking (DetNet) Data Plane: IPCurrent

  November 2020

• RFC 3343The Application Exchange (APEX) Presence ServiceCurrent

  May 2003

• RFC 7634ChaCha20, Poly1305, and Their Use in the Internet Key Exchange Protocol (IKE) and IPsecCurrent

  August 2015

• RFC 7628A Set of Simple Authentication and Security Layer (SASL) Mechanisms for OAuthCurrent

  August 2015

Also filed under

• INFORMATIONAL
• 2015
• IETF stream
• sec area