← CIS Controls v8 in plain English

4.5 IG1

Control 4 / Secure Configuration of Enterprise Assets and Software

Implement and Manage a Firewall on End-User Devices

Think of it likeEach personal device carries its own gatekeeper that refuses unexpected connections, even when the laptop is off at a coffee shop.

In plain English

Every laptop and phone runs its own firewall, so it blocks unwanted incoming connections wherever it happens to be.

Related CSF subcategories (unofficial mapping)