Security

Compliance Posture

Overview

Procedure

  1. Login into CloudVerse.

  2. From the left pane (navigation menu), select Governance. Click the Security sub-menu item. The tab Compliance Posture displayed the Overview tab as default page

  3. This page displays the following elements

Widget

Description

Monitored Accounts

Display number connected account

Total Resources

Display total number resources

Total NC’s

Display total number non Non – Compliance

Providers Compliance Status

Display cloud provider of compliance status

Control Domain Wise NC’s

Display widget of Control domain noncompliance

Security Standards Compliance Status

Display Security Standards Compliance Status

Accounts With Most NC's

Accounts With Most Accounts With Most NC's

Compliance Trend

Display Compliance Trend and group by resources

Repeat NC's

Display the top 5 repeat non compliances

Non – Compliance List

Procedure

  1. Login into CloudVerse.

  2. From the left pane (navigation menu), select Governance. Click the Security sub-menu item. The tab Compliance Posture displayed the Overview tab as default page

  3. Click on tab Non-Compliance List tab

Field

Description

Provider

Display cloud provider

Resource ID

Display resource ID

Domain

Display domain name of resource

Control

Display control value

Severity

Display severity of resource

Last update

Display the last date time when item scaned

Security Controls (Coming Soon)

...

Compliance Analytics

Security Standards

Procedure

  1. Login into CloudVerse.

  2. From the left pane (navigation menu), select Governance. Click the Security sub-menu item. Click on tab Compliance Analytics, displayed the Security Standards tab as default page

This page displays the compliance status of resources used from the cloud providers

Field

Description

Security Standards Name

Display Security Standards Name

Failed Check

Display number of failed checked

Compliance Score

Display percentage value of Compliance Score

Severity

Display severity value: Critical, High, Medium, Low

Cloud Providers

  1. Login into CloudVerse.

  2. From the left pane (navigation menu), select Governance. Click the Security sub-menu item. Click on tab Compliance Analytics, displayed the Security Standards tab as default page.

  3. Click on tab Cloud Provider

This page displays the number of failed jobs all the total jobs run from different cloud providers.

Field

Description

Cloud Providers

Display Cloud Providers

Failed Check

Display number of failed checked

Compliance Score

Display percentage value of Compliance Score

Severity

Display severity value: Critical, High, Medium, Low

Settings for CSPM

Procedure

  1. Login into CloudVerse.

  2. From the left pane (navigation menu), select Governance. Click the Security sub-menu item. Click on tab Settings, displayed the list of CSPM Alarms created.

Field

Description

Alarm Name

Indicates the name of the alarm.

Status

Indicates the status of the alarm (Active or Inactive).

Updated At

Indicates the date when the alarm was created.

Created By

Indicates the name of the user who last updated the alarm.

Expiry Date

Indicates the expiry date of the alarm.

Notification Preference

Displays the preferred notification type that was set while creating the alarm. By default, the In-app notification type is enabled.

The values are

  • In-app

  • Slack

  • Email

  • Teams

Action

Displays the list of actions that you can perform on the alarms available.

View Alarm Details

  1. Login into CloudVerse.

  2. From the left pane (navigation menu), select Governance. Click the Security sub-menu item. Click on tab Settings, displayed the list of CSPM Alarms created.

  3. The list of alarms available is displayed.

  4. From the list, click the Alarm Name link that you want to view the details.

  5. The Alarm Details page appears. Verify the details and click OK.

Create a new alarm

  1. Login into CloudVerse.

  2. From the left pane (navigation menu), select Governance. Click the Security sub-menu item. Click on tab Settings, displayed the list of CSPM Alarms created.

  3. The list of alarms available is displayed. Select the + Add button to create a new alarm. The Add Alarm dialog appears.

  4. To create an alarm, you must:

    1. Add the alarm details

    2. Set the alarm scope

    3. Add alarm threshold

    4. Set the notification preference

  5. Enter the required information in the following fields.

Field

Description

Alarm Details

Name

Enter a name for the alarm. This name is sent as the title for notifications related to this alarm

Description

Enter the detailed description of the alarm.

Alarm Type

Select the Alarm Type either Accrued Cost or Budget.

Granularity

Select the alarm granularity value from the drop-down. The values are Daily, Weekly, Monthly, and Yearly.

Expiry Date

Select the calendar date on which the alarm will expire.

Alarm Scope

If

In the If section, use the following drop-down lists to specify the condition to fetch the assets that are in the scope for the alarm.

  • Condition Type: Select the type of condition from the drop-down.

  • Condition Operator: Select the required operator from the drop-down.

  • Value: Select the value(s) for the selected condition type. You can select multiple entries from the list

After you enter the condition, click the Fetch Assets button to retrieve the assets in scope for the assets based on the condition provided. You can click the popout icon to view the assets list based on the selected condition in a new tab.

Alarm Threshold

Alarm Amount

Enter the amount allocated for the alarm. The value must always be greater than zero. You can also use the up and down arrows to increase or decrease the value.

Currency

Select the currency type specific to the alarming amount.

Severity

Indicates the severity level of the alarm defined.

Notification Preference

Select the checkbox corresponding to the notification type that you prefer. By default, the In-app notification type is enabled.

  1. Click Add. The new alarm is listed on the Alarms List page.

Edit an alarm

  1. Login into CloudVerse.

  2. From the left pane (navigation menu), select Governance. Click the Security sub-menu item. Click on tab Settings, displayed the list of CSPM Alarms created.

  3. The list of alarms available is displayed.

  4. On the Alarms List page, select the checkbox for the alarm that you want to edit or update.

  5. Under the Actions field, select the Edit icon.

  6. The Update Alarm page appears. Edit the details as required at each step and click Next.

  7. Click Update.

De-activate an alarm

  1. Login into CloudVerse.

  2. From the left pane (navigation menu), select Governance. Click the Security sub-menu item. Click on tab Settings, displayed the list of CSPM Alarms created.

  3. The list of alarms available is displayed.

  4. Note: You can only deactivate the alarms that are in the active status.

  5. Corresponding to the alarm, select the checkbox, and then click the De-activate button from the top menu.

  6. In the Confirmation popup, click Confirm to deactivate the alarm.

Activate an alarm

  1. Login into CloudVerse.

  2. From the left pane (navigation menu), select Governance. Click the Security sub-menu item. Click on tab Settings, displayed the list of CSPM Alarms created.

  3. The list of alarms available is displayed.

  4. Note: You can only deactivate the alarms that are in the deactivated status.

  5. Corresponding to the alarm, select the checkbox, and then click the Re-activate button from the top menu.

  6. In the Confirmation popup, click Confirm to reactivate the alarm.

Delete an alarm

  1. Login into CloudVerse.

  2. From the left pane (navigation menu), select Governance. Click the Security sub-menu item. Click on tab Settings, displayed the list of CSPM Alarms created.

  3. The list of alarms available is displayed.

  4. On the Alarms List page, select the checkboxes for the alarms that you want to delete.

  5. Under the Actions field, select the Delete icon.

  6. On the confirmation popup, click Confirm. The deleted alarms are removed from and are no longer displayed on the Alarm Lists page.

Last updated