网络安全 GRC 15 项
Cloud Security & CIS Benchmark Hardening Review
此检查清单为英文版。
Reviews cloud environment hardening against CIS Benchmark recommendations for identity, logging, networking, storage, and encryption.
CIS BenchmarksCIS Controls v8NIST 800-53
免费 PDF 或 Word · 输入邮箱即可下载。
Identity & Access Management
- Is MFA enforced for all console and privileged cloud accounts? *
- Is the root/global-admin account secured and not used for daily operations? *
- Are IAM policies scoped to least privilege without wildcard admin grants? *
- Are unused credentials and access keys rotated or disabled? *
Logging & Monitoring
- Is cloud-provider audit logging (CloudTrail / Activity Log / Audit Logs) enabled across all regions? *
- Are logs delivered to a protected, immutable storage location? *
- Are alerts configured for high-risk configuration and IAM changes? *
Networking
- Are security groups / firewall rules restricted from allowing 0.0.0.0/0 to sensitive ports (22, 3389)? *
- Is default VPC/VNet usage avoided in favor of purpose-built segmented networks? *
- Is VPC/network flow logging enabled? *
Storage & Data Protection
- Are object storage buckets blocked from public access unless explicitly required? *
- Is encryption at rest enabled for storage, databases, and volumes? *
- Is in-transit encryption (TLS) enforced for storage and database connections? *
Posture Management
- Is a cloud security posture management (CSPM) tool used to continuously assess against benchmarks? *
- Are benchmark deviations tracked and remediated with documented exceptions? *
下载完整的Cloud Security & CIS Benchmark Hardening Review检查清单
免费获取排版清晰、便于打印的 PDF，或可编辑的 Word 文档。