The following adapters may need configuration of additional permissions or APIs: CIS Google Cloud Platform Foundations Benchmark v1.1Ĭloud Asset Compliance calculations are done as part of your discovery cycle using the existing relevant adapter configuration.
CIS Amazon Web Services Foundations Benchmark v1.2.CIS Amazon Web Services Foundations Benchmark v1.3.CIS Amazon Web Services Foundations Benchmark v1.4.With Blink, you can run an automation to check these controls daily, take actions based on the results, and share a formatted report to a Slack or Teams channel.Use the Cloud Asset Compliance page to compare cloud configuration and asset data against industry benchmarks and frameworks. Running CIS GCP Compliance Checks with Blink Automation is critical for checking quickly and regularly. Running these checks manually can be very time and resource intensive. Checking Compliance with the CIS GCP BenchmarkĮnsuring compliance with the CIS GCP Benchmark requires you to review the following areas: You can read more about the difference between V1 and V2 in this release recap by Steampipe.
#CIS BENCHMARK CONTROLS MANUAL#
And once your internal controls are established, it’s important for organizations to check compliance periodically to identify weaknesses, either with manual or automated assessments.įor example, with the latest GCP CIS Benchmark (v2) released at the end of 2022, some controls are now recommended to be automated, such as ensuring strict permissions on API keys, strong hash algorithms, and no anonymously or publicly-accessible BigQuery Datasets. The two levels enable organizations to customize their cloud security standards for their unique needs. Level 2 is designed to provide organizations with additional levels of security through more robust settings, though they may come with potential performance or compatibility trade-offs.Level 1 focuses on easy-to-implement settings that, when implemented, can lower the attack surface and preserve performance.The benchmark report is organized into two distinct levels that cover a range of controls from basic to advanced configurations. The CIS Benchmark for GCP is designed by the CIS to provide detailed implementation guidance on how organizations can secure their GCP environment. In this guide, we’ll share how your organization can use the CIS GCP Benchmark to establish standardized internal policies and compliance controls. These benchmarks provide a comprehensive list of over 400 best practice cloud security controls to reduce attack surface and protect data for each platform. The Center for Internet Security ( CIS) regularly publishes sets of security configuration standards to help organizations maintain secure and compliant cloud infrastructure.
0 kommentar(er)
