Ensure that notification is enabled on all high risk items

СреднийУровень 1Ручная проверкаalibaba

Описание

Enable all risk item notification in Vulnerability, Baseline Risks, Alerts and Accesskey Leak event detection categories. To make sure that relevant security operators would receive notifications as soon as security events happens. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Using the management console: 1. Logon to Security Center Console. 2. Select Settings. 3. Click Notification. 4. Review notification settings and ensure all high-risk items are enabled. Expected state: Using the management console: 1. Logon to Security Center Console. 2. Select Settings. 3. Click Notification. 4. Enable all high-risk items on Notification setting.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Using the management console: 1. Logon to Security Center Console. 2. Select Settings. 3. Click Notification. 4. Enable all high-risk items on Notification setting.

Свойства

Операционные системы: Любая
Теги: alibabasecurity-center
Источник: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 8.5 Ensure that notification is enabled on all high risk items