Benchmark: PCI DSS requirement 5.1
Description
Deploy anti-virus software on all systems commonly affected by malicious software (particularly personal computers and servers). For systems not affected commonly by malicious software, perform periodic evaluations to evaluate evolving malware threats and confirm whether such systems continue to not require anti-virus software.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-azure-compliance
Start the Powerpipe server:
steampipe service startpowerpipe server
Open http://localhost:9033 in your browser and select PCI DSS requirement 5.1.
Run this benchmark in your terminal:
powerpipe benchmark run azure_compliance.benchmark.pci_dss_v321_requirement_5_1
Snapshot and share results via Turbot Pipes:
powerpipe benchmark run azure_compliance.benchmark.pci_dss_v321_requirement_5_1 --share
Controls
- Monitor missing Endpoint Protection in Azure Security Center
- Vulnerabilities in security configuration on your machines should be remediated
- System updates should be installed on your machines
- A vulnerability assessment solution should be enabled on your virtual machines
- SQL databases should have vulnerability findings resolved