← CIS Controls v8 in plain English
4.5 IG1
Control 4 / Secure Configuration of Enterprise Assets and Software
Implement and Manage a Firewall on End-User Devices
Think of it likeEach personal device carries its own gatekeeper that refuses unexpected connections, even when the laptop is off at a coffee shop.
In plain English
Every laptop and phone runs its own firewall, so it blocks unwanted incoming connections wherever it happens to be.
Related CSF subcategories (unofficial mapping)