Sections 4 & 5
Endpoint Protection & Patch Management SLA
Page 5 of 10
NCSC 14-Day Mandatory Patch SLA Metric
| Severity Level | CVSS Rating | Remediation SLA |
|---|---|---|
| Critical | 9.0 – 10.0 | <= 72 Hours |
| High | 7.0 – 8.9 | <= 14 Days (Mandatory) |
| Medium | 4.0 – 6.9 | <= 30 Days |
Endpoint Security (EDR & Script Control)
Deploy Next-Gen EDR (CrowdStrike, Defender for Endpoint) with active Tamper Protection enabled. Enforce AppLocker/WDAC policy to block unapproved script execution in temp folders (%AppData%, %Temp%).