Reskill · EWS
Endpoint & Workload Security
The agent executed on the host to finish its task, and EDR saw a trusted process do something it never does.
Telling autonomous action from compromise, on the same endpoint, is the skill.
Start with these skills
- Approve what runs, including AI tools
- Keep endpoints compatible with the controls
- Inventory every endpoint that touches AI
- Manage endpoints to the policy floor
- Lock screens by default
The rung you have to reach
No AISMM ladder maps here yet.
The AISMM model does not yet carry a maturity category for this function’s remit. Baseline it through the diagnostic instead; the rung follows when the model does.
Your syllabus
The plays that climb the rung.
The curriculum for this function is still forming. Baseline it below, and the fitted plays follow.
Autonomy must not outrun maturity. The gate holds each rung until its controls are evidenced. The gate framework: eight gates, three lanes →
Baseline Endpoint & Workload Security →open to run · research access to saveBack to the maturity read