# Introduction **Cloud Compliance** through the platform provides a policy management service that ensures that cloud services consumed are compliant with established standards and security practices. Centralized policy management is powered by declarative policy language which allows to define enterprise business logic as policies which can be scheduled or executed on demand to manage compliance of various cloud services and its resources. The platform's compliance rules enable users to assess the security of their cloud infrastructure and applications using a cloud platform's native security assessment tools or third-party assessment tools. User operations teams can also review their consolidated compliance posture in a dashboard and take any necessary actions form there. Cloud Compliance offered through this platform is intended to help users meet the following objectives: * **Maintain compliance and configuration standards**. * **Maintain security posture for the resources provisioned**. * **Manage and activate policies to optimize resource utilization**. # Compliance Posture Dashboard Perform the following steps to navigate compliance views, apply filters, and review control details to ensure regulatory adherence: ### 1. Navigate to SecOps On the left navigation menu, click **SecOps**. ### 2. Click Compliance Posture Click **Compliance Posture**. ### 3. View the Compliance Posture Page The **Compliance Posture** page opens and the **By Cloud Provider** tab displays by default. On this page, users can view details about the current state of their cloud accounts against compliance standards and industry frameworks to help continuously improve the compliance posture. The **By Cloud Provider** tab shows the compliance details as per cloud providers and the **By Policy** tab shows the compliance details as per policies. View the Compliance Posture Page

### 4. Apply Filter Users can click the **Filter** icon on the top-right side of the screen and apply filters. ### 5. Select Values and Apply Filter After the user clicks the **Filter** icon, the **Advanced Filter** screen opens. For the following filters, click the drop-down and select relevant options for each of the fields and click **Apply**. * Cloud Provider * Cloud Accounts * Standards After filling all the required fields, click **Apply Filter**. Select Values and Apply Filter

### 6. Open Column Selector Click the **Edit column** icon to open the **Edit Columns** screen. ### 7. Edit Columns In this screen, users can check/uncheck the columns that they want to view on the **Compliance Posture** screen and they can also rearrange the order of columns. ### 8. Download Details Click the "**Download Data as CSV**" icon to download compliance details in CSV format. ### 9. View Compliance Posture by Cloud Provider In the **By Cloud Provider** tab, users can expand the section corresponding to a cloud provider to view the compliance posture details. For example, the GCP section shows all the GCP-related compliance postures. ### 10. Search for Details Use the **Search** box to find the compliance details or standards. ### 11. View Compliance Details Users can view the compliance posture details in the columns that appears. In the **Control Status** column, click on "i" corresponding to a standard to view the status details. In this example, users can view the compliance details for AWS.

## Download Policy Violations Summary For a particular standard, scroll towards complete right side of the screen to view the **Action** column. Now click the "**Download Policy Violations Summary**" icon to download the policy violations summary details in Excel format.

## Download Policy Violations Grouped by Resource Type For a particular standard, scroll towards complete right side of the screen to view the **Action** column. Now click the "**Download Policy Violations Grouped by Resource Type**" icon to download the policy violation details grouped by resource types in Excel format.

## View - Compliance Visibility Click the **eye** icon corresponding to a standard to go to the **Compliance Visibility** page and view detailed information. View the following details in the **Compliance Visibility** screen: ### 1. View Summary Details For a selected standard, users can view a short compliance summary on the top of the screen. Users can click the numbers shown in the **Control Count by Status** section and can view the changes in the **Summary by Control Family** graph.

### 2. Apply Filters and Download Details Users can select appropriate options in the **Group By** and **Control Family** drop-downs and view specific details in the graphs shown below. They can also click the "**Download as CSV**" icon located on the right side of the screen to download the compliance details in Excel format. ### 3. View Summary By Control Family Graph The **Summary by Control Family** graph shows the compliance counts as per control families. Users can hover the mouse pointer over the graph to view the control count.

### 4. Apply Filter for Summary by Control Family In the **Summary by Control Family** graph, select an option in the drop-down to view specific details. ### 5. View Compliance Control Trend Graph View the **Compliance Control Trend** graph that shows the control count as per date and time. You can hover the mouse pointer over a data-point on the graph to view details.

### 6. Apply Filter for Compliance Control Trend Graph You can click the drop-downs and select appropriate values to apply the filter, and view specific details in the graph. ### 7. View Summary by Control Family View the **Summary by Control Family** section that shows the list of controls grouped in different sub-sections.

### 8. Expand a Control Family Click to expand a sub-section (control heading) to view the list of controls within it. ### 9. Review Compliance Metrics Each sub-section shows "**% Resources Compliant**" and "**Control Violations**". ### 10. View the List of Control Family View the sub-sections along with the corresponding "**% Resources Compliant**" and "**Control Violations**". ### 11. View Control Details Users can view the details for a control family in these columns -- **Control Name, Policy Name, Control Family, Resource Type, Status**, and **Action**. ### 12. Take Action on a Control Based on the status of the control, users can take an action on a control. To take an action, first expand the control sub-section, and then click **VIEW** and select an option from -- **Resources, Control Details**, and **Policy Details**.

### 13. Select Resources Option Select **Resources** to view the impacted resources. ### 14. View Impacted Resources Screen On the **Impacted Resources** page, users can view the **Overview** section that provides brief details about the policy and control.

### 15. View Resource List The **Resource List** section shows the resource details in various columns, such as **Resource Id, Resource Name, Resource, Resource Status, Location,** and **Incident Number**. Users can use the **Search** box to find any resource-related details. ### 16. Download Data In the **Resources List** section, users can click the "**Download Data as CSV**" icon to download the resource-related details. ### 17. Skip Resources If you want to skip a resource, select the checkbox(es) next to the **Resource ID(s)**, and then in the **Select Action** drop-down, select **Skip**. A dialog box appears where you can click **Yes** to skip the selected resource(s), else click **No**. ### 18. Select Control Details Click **VIEW** and select the option **Control Details**. ### 19. View Control Details The **Control Details** dialog box appears where users can view the control details in the **Control Attributes** and **Control Action Attributes** sections. ### 20. Select Policy Details Click **VIEW** and then select **Policy Details** to view policy information. ### 21. View Policy Details A dialog box appears where users can go through these tabs to view policy details: **Metadata, Content, Compliance, Remediation**, and **Notification**. ## Improve Action Click the **Improve** icon. This opens the **By Policy** tab that displays the list of policies and its details. Click Improve Icon

Perform the following steps to view details in the **By Policy** tab: ### 1. View By Policy Tab View the list of policies along with its control status. ### 2. Expand a Policy Expand a policy to view the resources related to it. ### 3. Download as CSV Click the "**Download as CSV**" icon to download details as CSV. ### 4. Skip Action Users can click resource IDs to select them. After that, they can click **Actions** and then click the option "**Skip this resource**" to skip the selected resources. A dialog box appears where the users can click **Yes** to skip the selected resources, else they can click **No**. ### 5. Apply Filters In the **By Policy** tab, you can apply any of these filters that appears on the top-right side of the screen -- **Standards, Cloud Provider, Policies**, and **Cloud Accounts**. To apply the filter, click the drop-down, select relevant options, and then click **Apply**. ### 6. Download Policy Violations Click the download icon and select one of the following options to download details: * **Download Policy Violations Summary** * **Download Policy Violations Grouped By Resource Type**

## Start Assessment Click the **Start Assessment** icon to start the assessment on the selected standard and cloud account. A message displays confirming successful execution of assessment.

## View Standard Click the **Standard** icon corresponding to a standard and cloud account to view the list of controls.

View the list of controls for the selected standard and cloud account.