APPENDIX E - End Point Protection

Why It Matters

Many security breaches originate at the endpoint - from lost USB drives to unauthorised apps or portable devices introducing malware. A strong endpoint control strategy helps you enforce security policies across laptops, desktops, and mobile devices - protecting data where its most vulnerable.

What we can cover

Our Endpoint Control and Protection service  (ITE8 Shield Endpoint Protection) combines layered security and granular control to reduce risk at the device level:

• Device Control - Allow or restrict USB drives, Bluetooth, and other peripherals
• Application Whitelisting - Proven unapproved or risky software from running
• Full Disk and USB Encryption - Secure sensitive data on devices and removable media
• Content Filtering - Limit access to unsafe websites and online categories
• Offline Protection - Enforce policies even when devices aren’t connected to the internet
• Centralized Policy Management - Apply and monitor consistent controls across your fleet
• Audit Logs & Reporting - Maintain visibility into usage, risk, and compliance

Benefits

• Our Shield service is a managed solution where we actively add and respond to events with your system. Think of it as a full security team ready and waiting
• Prevents data leakage through USBs or portable storage
• Blocks unapproved or malicious software at the source
• Ensures compliance with privacy and data protection standards (e.g., ISO 27001, GDPR, Essential 8)
• ISO 27001: Proof that your business manages information securely
• GDPR: Legal rules for protecting personal data
• Essential 8: Practical steps to prevent hacking and data loss

• Enhances visibility into user behaviour and endpoint health
• Scales easily across offices, users, and devices
• Reduces dependency on user behaviour by enforcing technical controls