Glossary
Endpoint
Also called: Endpoint device
In one sentence
Any device that connects to your network or data — laptops, desktops, phones, tablets and servers — and is used by a person or runs business software.
In IT, an endpoint is any device at the “end” of the network: a front-desk PC, a doctor’s laptop, a manager’s phone with work email, a tablet used for patient intake, or a server. Each one is both a tool your team relies on and a possible way in for attackers.
Endpoints are where most attacks land. A staff member opens a malicious attachment on a PC, a phone with work email is lost in a parking lot, or a laptop that hasn’t been updated in months gets exploited. That’s why so many security tools are “endpoint” tools: EDR watches for suspicious behavior on each device, Intune manages settings and updates, and BitLocker encrypts the drive.
Knowing your endpoints is step one. Many small offices don’t have an accurate list of their devices — including the old PC in the back room running the X-ray software, or the personal phones that get work email. HIPAA’s risk analysis and most cyber insurance applications assume you know what you have.
Example: a practice discovers seven personal phones receiving work email. With Intune app protection, work email on those phones is now protected by a PIN and can be wiped without touching personal photos. Every practice PC is enrolled, encrypted and protected by EDR. See device management and plan replacements with the computer replacement planner.
Related terms
- EDR (endpoint detection and response)EDR is security software on each computer that watches for suspicious behavior, records what happens, and lets defenders stop and isolate an attack in progress.
- Microsoft IntuneMicrosoft Intune is Microsoft's cloud service for managing and securing company computers, phones and tablets — settings, apps, updates and encryption — from one place.
- BitLockerMicrosoft’s full-disk encryption built into business editions of Windows, which makes a lost or stolen PC’s data unreadable.
- Patch managementPatch management is the ongoing process of installing security updates on operating systems, applications and devices — on a schedule, with tracking, so nothing is left unprotected.
- RMM (remote monitoring and management)RMM is the software IT providers install on computers and servers to monitor their health, install updates, run maintenance and connect remotely to fix problems.
- TPM (Trusted Platform Module)A security chip (or chip-level feature) in a computer that stores encryption keys and checks the computer hasn’t been tampered with.