サイバーセキュリティGRC 13項目
Cloud Access Security Broker (CASB) Deployment Review
このチェックリストは英語版です。
Assesses a CASB deployment covering SaaS discovery, access governance, data protection, threat detection, and deployment mode coverage.
CSA CCMNIST 800-53CIS
無料のPDFまたはWord・メールアドレスを入力してダウンロード。
Discovery & Visibility
- Is shadow IT discovery enabled to identify unsanctioned SaaS usage? *
- Are discovered cloud apps risk-scored and categorized as sanctioned/unsanctioned? *
- Are sanctioned SaaS apps connected via API for deep visibility? *
Deployment Modes
- Are appropriate deployment modes (API, forward proxy, reverse proxy) selected per use case? *
- Is inline traffic inspection coverage validated for managed and unmanaged devices?
- Is the CASB integrated with the identity provider for session context? *
Access & Data Protection
- Are DLP policies enforced on data uploaded to or shared from sanctioned SaaS apps? *
- Are adaptive access controls applied based on user, device, and risk? *
- Are external sharing and public link risks in cloud storage monitored and controlled? *
- Are OAuth app grants to third-party apps reviewed and risky grants revoked?
Threat Detection & Response
- Is anomalous activity (impossible travel, mass download, compromised accounts) detected? *
- Are CASB alerts forwarded to the SIEM/SOC for correlation and response? *
- Are automated response actions (block, quarantine, revoke session) configured for high-severity events?
Cloud Access Security Broker (CASB) Deployment Reviewチェックリストの完全版をダウンロード
印刷しやすいPDF、または編集可能なWord文書で無料で入手できます。