Benchmark: GV.PO-02

Description

Policy for managing cybersecurity risks is reviewed, updated, communicated, and enforced to reflect changes in requirements, threats, technology, and organizational mission.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-gcp-compliance

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select GV.PO-02.

Run this benchmark in your terminal:

powerpipe benchmark run gcp_compliance.benchmark.nist_csf_v2_gv_po_02

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run gcp_compliance.benchmark.nist_csf_v2_gv_po_02 --share

Controls

Ensure that Cloud Audit Logging is configured properly across all services and all users from a project
Ensure that the log metric filter and alerts exist for Audit Configuration changes
Ensure that the log metric filter and alerts exist for Custom Role changes including undelete operations
Ensure that the log metric filter and alerts exist for Custom Role changes
Ensure that the log metric filter and alerts exist for VPC Network Firewall rule changes
Ensure that the log metric filter and alerts exist for VPC network changes
Ensure that the log metric filter and alerts exist for VPC network route changes
Ensure log metric filter and alerts exist for project ownership assignments/changes
Ensure that the log metric filter and alerts exist for SQL instance configuration changes
Ensure that the log metric filter and alerts exist for Cloud Storage IAM permission changes
Ensure that sinks are configured for all log entries