Compliance Center
Manage Risk and Enforce Compliance with Forescout.
New devices constantly connect to your network – everything from managed endpoints, BYOD and other unmanaged devices, IoT, virtual machines, cloud instances and ICS/OT systems. Even rogue and unauthorized devices. Learn how to manage risk from all connecting devices and enforce device compliance to adhere to security frameworks, industry standards and regulations.
Compliance Framework
NIST Cybersecurity Framework 2.0
This new mapping guide was developed to bridge the gap between 2.0’s theoretical underpinnings with practical, actionable steps for compliance.
The Forescout Platform for DORA
This comprehensive guide systematically maps the EU’s Digital Operational Resilience Act (DORA) directly to the Forescout Platform.
How Forescout Enables and Accelerates Alignment with TSA SD 2021-02
The TSA’s second Security Directive (TSA SD 2021-02) that required pipeline owners and operators to implement cybersecurity practices to prevent operational disruption or system degradation.
Comply to Connect (C2C)
The U.S. Department of Defense Comply-to-Connect (C2C) program specifies five critical steps to defend organizations from cyberattacks and mitigate risk. The Forescout platform can provide visibility, hygiene, mitigation and control to ensure DoD mission readiness.
Continuous Diagnostics and Mitigation (CDM)
Federal Departments and Agencies (DAs) can continuously identify risk within federal network environments, prioritize risk based on potential impact and mitigate the most severe risks using the Forescout platform.
EU NIS2
Learn how Forescout helps you streamline compliance with EU NIS2 to quickly and comprehensively adhere to the CAF through an accurate and real-time inventory of all IP-connected devices (IoT, OT, BYOD, virtual machines) on the network.
ISA 99/IEC 62443
The ISA 99/IEC 62443 standard has become the globally recognized go-to standard for the Oil & Gas and Manufacturing industries. Learn how Forescout helps you easily introduce and maintain this standard in your ICS network.
NERC CIP
Streamline NERC CIP compliance with passive network monitoring. Learn how continuous asset detection and monitoring can streamline your compliance with NERC CIP standards, saving you considerable time and money.
TSA Pipeline Security
Forescout can help pipeline owners/ operators meet the requirements of TSA’s Pipeline Security Guidelines with a proven, safe and reliable cybersecurity solution to help secure your pipeline assets and OT network.
HIPAA Compliance
This guide outlines how the Forescout platform supports HIPAA compliance in areas such as protecting ePHI, administrative and technical safeguards, and incident management.
Device Compliance
There’s no gray area when it comes to cybersecurity compliance. To hackers and regulators, partial compliance is noncompliance. Vulnerable platforms, unpatched devices and default passwords expose your network to substantial risk, creating compliance gaps that continue to widen as more devices are added or become virtual and extend into the cloud.
Frequently Asked Questions
How does Forescout align to the NIST Cybersecurity Framework 2.0?
Forescout maps Forescout’s platform to the NIST Cybersecurity Framework and publish a mapping guide for CSF 2.0, including the Govern function added in version 2.0, which helps organizations incorporate cybersecurity risk management into broader enterprise risk management. Forescout’s exposure management delivers automated compliance to NIST CSF alongside IEC 62443 and HIPAA.
How does Forescout align to NIS2 standards?
Forescout supports NIS2 alignment by helping essential and important entities manage cybersecurity risks, assess the effectiveness of security measures and minimize the impact of incidents on service delivery. The Vistaro (TM) platform collects evidence to support cybersecuirty governance, prioritize mitigation controls, and strengthen operational resilience across the industrial and information systems supporting the delivery of critical services.
How does Forescout align to the EU’s DORA regulation?
Forescout supports DORA alignment by helping financial entities manage ICT risk, assess security controls and reduce the impact of ICT-related incidents on critical services. It provides visibility and evidence to support ICT risk governance, prioritize risk mitigation measures, and compensating controls to strengthen digital operational resilience across interconnected systems and third-party connections.
How does Forescout align to CIS controls?
Forescout helps organizations apply key CIS Controls by identifying gaps in asset coverage, security configurations and vulnerability management. This enables leadership to prioritize the weaknesses that put critical operations at risk, plan, and prioritize remediation action, track, and document progress.
How does Forescout align to NERC CIP standards?
Forescout supports NERC CIP compliance by streamlining workflows to assess cyber assets, identify vulnerabilities, and prioritize actions that reduce exposure across critical systems. Maintaining asset baselines, monitoring changes, and generating supporting evidence, Forescout helps teams reduce manual effort, prepare for audits, and support the reliable operation of the Bulk Electric System.
How does Forescout align to MITRE ATT&CK framework?
Forescout supports MITRE ATT&CK alignment by helping organizations assess detection gaps across Enterprise and ICS environments, map security events to adversary tactics and techniques, and use threat intelligence from Vedere Labs to enrich alerts. These capabilities help organizations to prioritize detection coverage, accelerate investigations, and strengthen defenses against threats to critical operations.
See Forescout in Action
Choose Your Demo Experience
Self-Guided Demo
Take a self-guided demo for a live, hands-on experience
- Interactive product tour
- Explore key features
- Go at your own pace
Custom Demo
Get a personalized tour of our solutions and see how we can help you automate cybersecurity.
- Live demo with expert
- Tailored to your use case
- Get your questions answered