Does your organization deploy endpoint security solutions that can detect security issues and enforce remediation before granting network access?

This question assesses whether your organization uses endpoint security technologies that can identify security problems like missing patches, malware infections, or unauthorized software before allowing devices to access your network. These solutions, often called Network Access Control (NAC) or endpoint compliance systems, can automatically quarantine or redirect non-compliant devices to a remediation environment where issues can be fixed before granting full network access. Evidence of fulfillment could include documentation of your NAC solution configuration, screenshots of the management console showing policy enforcement rules, remediation workflows, and reports showing endpoints that were quarantined and subsequently remediated before being granted access.