CISA Cloud Security Technical Reference Architecture v2.0
Section 5: Cloud security posture management – CISA Cloud Security Technical Reference Architecture v2.0

CISA Cloud Security Technical Reference Architecture v2.0 5.1: Use cloud security posture management continuously and as an enabler of zero trust

What does 5.1 require?

Cloud security posture management, a continuous process that watches the cloud environment, finds vulnerabilities, raises alerts and mitigates them to cut risk, is adopted so that governance, policy, identity, data, infrastructure and application protection, health monitoring and incident response outcomes are achieved through security and risk assessment, continuous monitoring and alerting, identity management, DevSecOps integration and analytics-based capabilities; and it is used to advance zero trust by building an enterprise-wide view of identities spanning cloud and on-premises environments, integrating asset and vulnerability management with automation, segmenting networks and gaining network visibility, designing applications for the cloud with continuous health and security monitoring, and protecting data at rest and in transit with monitoring of access logs for anomalies and misconfigurations.

Maintained by Gerard Blokdyk

Other controls in Section 5: Cloud security posture management – CISA Cloud Security Technical Reference Architecture v2.0

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.