GRC de ciberseguridad 15 elementos
Cloud Security & CIS Benchmark Hardening Review
Esta lista de verificación está en inglés.
Reviews cloud environment hardening against CIS Benchmark recommendations for identity, logging, networking, storage, and encryption.
CIS BenchmarksCIS Controls v8NIST 800-53
PDF o Word gratuito · introduzca su correo electrónico para descargar.
Identity & Access Management
- Is MFA enforced for all console and privileged cloud accounts? *
- Is the root/global-admin account secured and not used for daily operations? *
- Are IAM policies scoped to least privilege without wildcard admin grants? *
- Are unused credentials and access keys rotated or disabled? *
Logging & Monitoring
- Is cloud-provider audit logging (CloudTrail / Activity Log / Audit Logs) enabled across all regions? *
- Are logs delivered to a protected, immutable storage location? *
- Are alerts configured for high-risk configuration and IAM changes? *
Networking
- Are security groups / firewall rules restricted from allowing 0.0.0.0/0 to sensitive ports (22, 3389)? *
- Is default VPC/VNet usage avoided in favor of purpose-built segmented networks? *
- Is VPC/network flow logging enabled? *
Storage & Data Protection
- Are object storage buckets blocked from public access unless explicitly required? *
- Is encryption at rest enabled for storage, databases, and volumes? *
- Is in-transit encryption (TLS) enforced for storage and database connections? *
Posture Management
- Is a cloud security posture management (CSPM) tool used to continuously assess against benchmarks? *
- Are benchmark deviations tracked and remediated with documented exceptions? *
Descargue la lista de verificación Cloud Security & CIS Benchmark Hardening Review completa
Obténgala gratis como PDF limpio e imprimible o como documento de Word editable.