GRC Cybersécurité 15 points
Cloud Security & CIS Benchmark Hardening Review
Cette liste de contrôle est en anglais.
Reviews cloud environment hardening against CIS Benchmark recommendations for identity, logging, networking, storage, and encryption.
CIS BenchmarksCIS Controls v8NIST 800-53
PDF ou Word gratuit · saisissez votre e-mail pour le télécharger.
Identity & Access Management
- Is MFA enforced for all console and privileged cloud accounts? *
- Is the root/global-admin account secured and not used for daily operations? *
- Are IAM policies scoped to least privilege without wildcard admin grants? *
- Are unused credentials and access keys rotated or disabled? *
Logging & Monitoring
- Is cloud-provider audit logging (CloudTrail / Activity Log / Audit Logs) enabled across all regions? *
- Are logs delivered to a protected, immutable storage location? *
- Are alerts configured for high-risk configuration and IAM changes? *
Networking
- Are security groups / firewall rules restricted from allowing 0.0.0.0/0 to sensitive ports (22, 3389)? *
- Is default VPC/VNet usage avoided in favor of purpose-built segmented networks? *
- Is VPC/network flow logging enabled? *
Storage & Data Protection
- Are object storage buckets blocked from public access unless explicitly required? *
- Is encryption at rest enabled for storage, databases, and volumes? *
- Is in-transit encryption (TLS) enforced for storage and database connections? *
Posture Management
- Is a cloud security posture management (CSPM) tool used to continuously assess against benchmarks? *
- Are benchmark deviations tracked and remediated with documented exceptions? *
Téléchargez la liste de contrôle Cloud Security & CIS Benchmark Hardening Review complète
Obtenez-la gratuitement en PDF propre et imprimable, ou en document Word modifiable.