Security Solutions

AWS

1 – Endpoint (North / South)

AWS Network Firewall

AWS Firewall Manager

2 – Endpoint (East / West)

AWS Audit Manager

3 – DDoS / WAF

Amazon CloudFront (CDN)

AWS Shield (DDoS)

AWS WAF

4 – Cloud SIEM / SOAR / MDR

AWS Security Hub

Amazon Detective

AWS CloudTrail

5 – Vul Mgmt. / TI

Amazon GuardDuty

AWS Config

6 – IAM / MFA

AWS Identity & Access Management

AWS IAM Identity Center (Single Sign-On)

7 – Endpoint (XDR AI/UBA)

AWS Lambda (with Security Hub & GuardDuty)

8 – Workload Protection

Amazon Inspector

9 – ZTNA

AWS IoT Device Defender

0 - Cross-Framework

AWS Elastic Disaster Recovery

AWS Key Management Service

AWS Artifact

Amazon Macie

AZURE

1 – Endpoint (North / South)

Azure Firewall

Azure Firewall Manager

Azure Application Gateway

Microsoft Defender for Endpoint

2 – Endpoint (East / West)

Azure Monitor

3 – DDoS / WAF

Azure DDoS Protection

Azure Web Application Firewall

4 – Cloud SIEM / SOAR / MDR

Microsoft Sentinel

5 – Vul Mgmt. / TI

Microsoft Defender for Cloud

6 – IAM / MFA

Azure Active Directory External Identities

Microsoft Entra ID (Formally Active Directory)

Microsoft Entra Permissions Management (CIEM)

Microsoft Intune Endpoint Privilege Management (PEDM)

7 – Endpoint (XDR AI/UBA)

Microsoft Defender XDR

8 – Workload Protection

Azure Management Groups

9 – ZTNA

Azure VPN Gateway

Azure Bastion

0 - Cross-Framework

Azure Key Vault

Azure Backup

Azure Site Recovery

GCP

1 – Endpoint (North / South)

Google - Cloud Firewall

Google - Cloud Cloud Security Foundations

2 – Endpoint (East / West)

Google - Cloud IDS

Google - Sensitive Data Protection (DLP)

3 – DDoS / WAF

Google - Cloud CDN

Google - Cloud Armor

Google - Web Risk

Google - reCAPTCHA Enterprise

Google - Apigee API Management

4 – Cloud SIEM / SOAR / MDR

Google - Chronicle SIEM

5 – Vul Mgmt. / TI

Google - Security Command Center

Google - Mandiant Threat Intelligence

Google - Binary Authorization

Google - Anthos

6 – IAM / MFA

Google - Cloud Identity

Google - Access Transparency and Access Approval

7 – Endpoint (XDR AI/UBA)

Google - Mandiant XDR Platform

8 – Workload Protection

Google - Assured Workloads

Google - VPS Service Controls

9 – ZTNA

Google - Cloud VPN

Google - BeyondCorp Enterprise

0 - Cross-Framework

Google - Cloud Key Management

Google - Confidential Computing

Google - Backup and DR Service

A

1 – Endpoint (North / South)

Palo Alto Next Generation Firewalls (NGFW)

Symantec Endpoint Security Enterprise

Proofpoint - Email Security

2 – Endpoint (East / West)

Palo Alto Next Generation Firewalls (NGFW)

Cisco - Secure Firewall

3 – DDoS / WAF

Cloudflare

4 – Cloud SIEM / SOAR / MDR

IBM QRadar - SIEM / SOAR

Expel - MDR / SOC Operation Services

5 – Vul Mgmt. / TI

Qualys - Vulnerability Management

Recorded Future

Wiz - Vulnerability Management

Valence Security - SSPM - SaaS Security Posture Management

Zylo - SaaS Management

Palo Alto Prisma Cloud

6 – IAM / MFA

OKTA - Identity & Access Management

BeyondTrust - Privilege Access Management

7 – Endpoint (XDR AI/UBA)

Crowdstrike XDR

8 – Workload Protection

Guardicore

9 – ZTNA

Zscaler

0 - Cross-Framework

Thales (Vormetric) CipherTrust Manager

Veeam - Back Up & Recovery

B

1 – Endpoint (North / South)

Cisco - Secure Firewall

McAfee - Enterprise Antivirus

Mimecast - Email Security

2 – Endpoint (East / West)

Cisco - Cloudlock CASB

Skyhigh Security - CASB (McAfee)

3 – DDoS / WAF

Akamai

4 – Cloud SIEM / SOAR / MDR

Palo Alto Cortex XSOAR

Red Canary - MDR / SOC Operation Services

5 – Vul Mgmt. / TI

Tenable - Insight Vulnerability Management

Aqua Security - CNAPP - Vulnerability Management

Wing Security - SSPM - SaaS Security Posture Management

BetterCloud - SaaS Management

6 – IAM / MFA

Cisco DUO

CyberArk - Privilege Access Management

7 – Endpoint (XDR AI/UBA)

SentinelOne - XDR - Respond Pro

8 – Workload Protection

Cisco Secure Workload - Tetration

9 – ZTNA

Palo Alto Prisma Cloud

0 - Cross-Framework

Commvault - Back Up & Recovery

C

1 – Endpoint (North / South)

Check Point - Next Generation Firewalls (NGFW)

Sophos - Enterprise Antivirus

Smarsh - Email Archiving

2 – Endpoint (East / West)

Check Point - Next Generation Firewalls (NGFW)

Netskope - CASB

3 – DDoS / WAF

Imperva - Application Security (DDoS & WAF)

4 – Cloud SIEM / SOAR / MDR

Splunk - SIEM / SOAR

5 – Vul Mgmt. / TI

Orca - Vulnerability Management

Torii Security - SaaS Management

Adaptive Shield - SSPM - SaaS Security Posture Management

6 – IAM / MFA

Ping Identity - PingOne for Workforce

Delinea - Privilege Access Management

7 – Endpoint (XDR AI/UBA)

Trend Micro - EDR

8 – Workload Protection

Illumio

9 – ZTNA

0 - Cross-Framework

Cohesity - Backup & Recovery

X

1 – Endpoint (North / South)

Fortinet - NGFW

Global Relay - Email Communication Surveillance

2 – Endpoint (East / West)

Fortinet - NGFW

Forcepoint - Bitglass CASB

Push Security CASB (ISPM & ITDR)

3 – DDoS / WAF

Netscout - Arbor Networks - DDoS

F5 - Application Security

4 – Cloud SIEM / SOAR / MDR

Securonix - Unified Defense SIEM

Exabeam - SIEM

LogRhythm - SIEM (Axon)

Devo - SIEM

5 – Vul Mgmt. / TI

Lacework - CNAPP

Tigera - CNAPP - Vulnerability Mgmt

Obsidian - SSPM - SaaS Security Posture Management

AvePoint - SaaS Management

Cledara - SaaS Management

Zluri - SaaS Management

6 – IAM / MFA

IBM - Security - Verify Identity

CyberArk - Privilege Access Management

7 – Endpoint (XDR AI/UBA)

Sophos - XDR

Check Point - Infinity XDR/XPR: Extended Prevention & Response

Broadcom / Symantec - Endpoint Security Enterprise

8 – Workload Protection

9 – ZTNA

0 - Cross-Framework

IBM:

1 – Endpoint (North / South)

IBM Security - MaaS360

IBM - Trusteer Rapport

IBM - Trusteer Rapport - Mobile

2 – Endpoint (East / West)

3 – DDoS / WAF

4 – Cloud SIEM / SOAR / MDR

IBM QRadar - SIEM / SOAR

IBM - QRadar Log Insights

IBM - X-Force

IBM - Mainframe zSecure Suite

5 – Vul Mgmt. / TI

IBM - Guardium Vulnerability Assessment

IBM - Guardium Data Protection

IBM - Guardium Data Risk Manager

IBM - Guardium Insights

IBM - Guardium Discover & Classify

IBM - Randori Recon

6 – IAM / MFA

IBM - Security - Verify Identity

IBM - Security - Verify Governance

IBM - Security - Verify Privilege Manager

IBM - Security - Verify Trust

IBM - Trusteer Pinpoint Detect

IBM - Trusteer Pinpoint Assure

7 – Endpoint (XDR AI/UBA)

IBM - QRadar EDR

8 – Workload Protection

9 – ZTNA

IBM - Trusteer Pinpoint Detect

IBM - Trusteer Pinpoint Assure

0 - Cross-Framework

IBM - Storage Protect Cloud

IBM - Storage Defender

IBM - Guardium Data Encryption

IBM - Guardium Key Lifecycle Manager

CISCO:

1 – Endpoint (North / South)

Cisco - Secure Firewall

2 – Endpoint (East / West)

Cisco - Cloudlock CASB

3 – DDoS / WAF

4 – Cloud SIEM / SOAR / MDR

Splunk - SIEM / SOAR

5 – Vul Mgmt. / TI

6 – IAM / MFA

Cisco DUO

7 – Endpoint (XDR AI/UBA)

8 – Workload Protection

Cisco Secure Workload - Tetration

9 – ZTNA

0 - Cross-Framework

CROWDSTRIKE:

1 – Endpoint (North / South)

2 – Endpoint (East / West)

3 – DDoS / WAF

4 – Cloud SIEM / SOAR / MDR

5 – Vul Mgmt. / TI

6 – IAM / MFA

7 – Endpoint (XDR AI/UBA)

Crowdstrike XDR

8 – Workload Protection

9 – ZTNA

0 - Cross-Framework

PALO ALTO:

1 – Endpoint (North / South)

Palo Alto Next Generation Firewalls (NGFW)

2 – Endpoint (East / West)

3 – DDoS / WAF

4 – Cloud SIEM / SOAR / MDR

Palo Alto Cortex XSOAR

5 – Vul Mgmt. / TI

Palo Alto Prisma Cloud

6 – IAM / MFA

7 – Endpoint (XDR AI/UBA)

8 – Workload Protection

9 – ZTNA

Palo Alto Prisma Cloud

0 - Cross-Framework

CORO:

1 – Endpoint (North / South)

Coro - Cloud Network Security Modules

Coro - Email Security Modules

Coro - Endpoint Security Modules

2 – Endpoint (East / West)

Coro - Cloud Network Security Modules

3 – DDoS / WAF

Coro - Cloud Network Security Modules

4 – Cloud SIEM / SOAR / MDR

Coro - Endpoint Security Modules

5 – Vul Mgmt. / TI

Coro - Endpoint Security Modules

6 – IAM / MFA

7 – Endpoint (XDR AI/UBA)

Coro - Endpoint Security Modules

8 – Workload Protection

9 – ZTNA

Coro - Cloud Network Security Modules

0 - Cross-Framework