adammontville
commented
5 years ago Inputs:
- EI: Endpoint inventory
Operations:
- Enumerate all wireless-access-capable endpoints
- For each identified endpoint:
- Determine whether the device has an identified business purpose for wireless access
- Examine the endpoint's configuration to determine whether wireless access is enabled
- Enumerate all endpoints with wireless access enabled and without an identified business purpose for wireless access
- Enumerate all endpoints without wireless access enabled and without an identified business purpose for wireless access
- Enumerate all endpoints with wireless access enabled and with an identified business purpose for wireless access
Measures:
- M1 = List of all wireless-access-capable endpoints
- M2 = List of endpoints with wireless access enabled and without an identified business purpose for wireless access
- M3 = List of endpoints without wireless access enabled and without an identified business purpose
- M4 = List of endpoints with wireless access enabled and with an identified business purpose for wireless access
- M5 = |M1|
- M6 = |M2|
- M7 = |M3|
- M8 = |M4|
- M9 = M7 + M8
Metrics:
- M9 / M5 Ratio of appropriately configured wireless-access-capable endpoints to the total number of wireless-access-capable endpoints
Disable wireless access on devices that do not have a business purpose for wireless access.
Measures
Metrics