mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
37 lines
2.2 KiB
Markdown
37 lines
2.2 KiB
Markdown
# Device Posture Assessment - Standards & References
|
|
|
|
## NIST SP 800-207: Zero Trust Architecture
|
|
- **Section 2, Tenet 5**: "The enterprise monitors and measures the integrity and security posture of all owned and associated assets"
|
|
- **Section 3.3**: Agent/Gateway Model includes device health as access input
|
|
- **URL**: https://csrc.nist.gov/publications/detail/sp/800-207/final
|
|
|
|
## CISA Zero Trust Maturity Model v2.0 - Device Pillar
|
|
- **Traditional**: Limited visibility into device health
|
|
- **Initial**: Compliance enforcement via MDM
|
|
- **Advanced**: Continuous monitoring with automated remediation
|
|
- **Optimal**: Real-time posture integrated into every access decision
|
|
- **URL**: https://www.cisa.gov/zero-trust-maturity-model
|
|
|
|
## NIST SP 800-124r2: Guidelines for Managing Mobile Device Security
|
|
- **Section 3.2**: Device compliance checking requirements
|
|
- **Section 4.1**: MDM security capabilities for posture enforcement
|
|
- **URL**: https://csrc.nist.gov/publications/detail/sp/800-124/rev-2/final
|
|
|
|
## CrowdStrike ZTA Documentation
|
|
- **ZTA Overview**: https://www.crowdstrike.com/products/zero-trust-protection/
|
|
- **ZTA API**: https://falcon.crowdstrike.com/documentation/156/zero-trust-assessment-apis
|
|
- **ZTA Scoring Methodology**: OS signals + sensor configuration signals
|
|
|
|
## Microsoft Intune Compliance
|
|
- **Compliance Policies**: https://learn.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started
|
|
- **Conditional Access Integration**: https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-grant
|
|
- **Device Health Attestation**: https://learn.microsoft.com/en-us/windows/security/operating-system-security/system-security/protect-high-value-assets-by-controlling-the-health-of-windows-10-based-devices
|
|
|
|
## Jamf Pro Compliance
|
|
- **Smart Groups**: https://learn.jamf.com/en-US/bundle/jamf-pro-documentation-current/page/Smart_Groups.html
|
|
- **Compliance Reporter**: https://learn.jamf.com/en-US/bundle/jamf-compliance-editor-documentation/page/Jamf_Compliance_Editor.html
|
|
|
|
## HIPAA Security Rule (45 CFR 164.312)
|
|
- **(a)(1)**: Access control - device posture as access control mechanism
|
|
- **(d)**: Device and media controls - encryption and integrity requirements
|