n this master's thesis the emphasis was on the importance of endpoint devices in organizations and their vulnerability which greatly affects the reduction of the complete security of the corporate environment. As entry points and with that the most vulnerable organization's asset endpoints represent an important part of the environment when assessing and applying security controls. From malicious programs (malwares) that compromise systems and social engineering techniques that compromise user's identities, organizations encounter and fight a variety of threats that aim to compromise the security and corporate operations on a daily basis. For this reason, there is a need to increase the scope of cybersecurity in all aspects of the corporate environment, which in addition to endpoints include networks, personnel and the cloud workloads. In addition to the implementation of firewalls, proxies, intrusion detection and prevention systems, VPN, network segmentation, EDR solutions and other security controls placed in all parts of the organization, importance is also placed on recovery processes and incident response. These are additional defense mechanisms to cover situations where attacks occur alongside serious compromise of devices, systems and user identities. Activities, actions, responses and implementations within the organization derive from the posture and framework of cybersecurity through policies, procedures, processes and guidelines that define security approaches within the organization with an emphasis on identification, protection, detection, response and recovery.