Benchmark: Requirement 11: Test Security of Systems and Networks Regularly
Description
Vulnerabilities are being discovered continually by malicious individuals and researchers, as well as being introduced by new software. System components, processes, and bespoke and custom software should be tested frequently to ensure security controls continue to reflect a changing environment.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-aws-compliance
Start the Powerpipe server:
steampipe service startpowerpipe server
Open http://localhost:9033 in your browser and select Requirement 11: Test Security of Systems and Networks Regularly.
Run this benchmark in your terminal:
powerpipe benchmark run aws_compliance.benchmark.pci_dss_v40_requirement_11
Snapshot and share results via Turbot Pipes:
powerpipe benchmark run aws_compliance.benchmark.pci_dss_v40_requirement_11 --share
Benchmarks
- 11.3: External and internal vulnerabilities are regularly identified, prioritized, and addressed
- 11.5: Network intrusions and unexpected file changes are detected and responded to
- 11.6: Unauthorized changes on payment pages are detected and responded to