Integrations · MDM
Jamf
ProofTrail connects to Jamf through its API, as staff device management, access review. Each sync feeds the checks below, and a failing check opens a task for its owner.
Staff Device Data
Import managed devices and their security settings: encryption, screen lock, OS updates and anti-malware. Synced every 12 hours.
- Reported device needs to be mapped to a staff
- Staff device status should be reported
- Screenlock should be enabled on staff device
- Disk encryption should be enabled on staff device
- Device OS should be up to date on staff device
- Antivirus should be running on staff device
- Firewall should be enabled on staff device
- Staff device should be reported
Access Control Data
Sync user accounts to ensure access is granted only to authorized personnel. Synced every 24 hours.
- Rules for who can access critical systems should be configured
- User access to critical system should be valid
- User should be identified
- User should have MFA enabled
- MFA should be enforced on critical system
- Periodic review of access to critical systems should be completed
- Access should be removed for offboarded user
- User should be identified (for access systems outside the audit scope)
- User access to critical system should be valid (for access systems outside the audit scope)
- User should have MFA enabled (for access systems outside the audit scope)
- MFA should be enforced on critical system (for access systems outside the audit scope)
- Access should be removed for offboarded user (for access systems outside the audit scope)