Tailwarden's Risk Assessment feature is an innovative and powerful tool designed to enhance the security and efficiency of your cloud infrastructure. By evaluating your current cloud setup against established compliance frameworks such as GDPR, PCI DSS, etc. this feature provides a clear and comprehensive analysis of your compliance status. If you want to get the list of frameworks included in Tailwarden, check out this page.
Key Benefits:
Compliance Tracking: Instantly know your compliance percentage with key frameworks.
Detailed Control Analysis: Understand your performance against each rule within a framework.
Resource Insights: View the specific resources impacted by each compliance rule.
Getting Started with Risk Assessment
To begin using the Risk Assessment feature, navigate to the Risk Assessment section in your Tailwarden dashboard. Here, you'll find a user-friendly interface that presents a high-level overview of your compliance status across different frameworks.
Understanding Your Compliance Dashboard
Compliance Percentage: Displays your current level of compliance with each framework.
Control Count: Shows the number of passing controls versus the total number of controls within a framework.
Exploring Frameworks
Each framework in the Risk Assessment tool is broken down into specific rules. Clicking on a framework reveals a detailed view of these rules, organized into five key columns:
The Rule: The specific requirement or control from the framework.
The Scope: Which part of your infrastructure the rule applies to. The potential values are:
Data integrity
Data protection
Detection services
Inventory
Loggin
Networking
Secure access management
Secure network configuration
Security
The Framework: The compliance framework that the rule belongs to.
Number of Resources: The count of your resources affected by the rule.
The Risk: The level of risk associated with non-compliance of the rule.
Each of those rules (+ cloud account) can be easily filtered at the top of the page. It makes it very easy to keep only Critical & High risk rules for example.
In-Depth Rule Analysis
Clicking on an individual rule provides a deeper dive into its implications:
Rules details: provide basic information about the rule & its remediation
Issues: See all resources that are affected by the rule.
Customization and Flexibility
Tailwarden understands that not all rules may be relevant to your specific cloud environment. Thus, we offer the flexibility to disable rules that you judge as non-applicable, ensuring that your risk assessment is as relevant and tailored as possible.
If you want to check all the rules that were disabled, you can easily find them by using filters.
Conclusion
Tailwarden's Risk Assessment feature is a crucial tool for maintaining the security and compliance of your cloud infrastructure. By offering detailed insights and flexible management options, it empowers your team to make informed decisions, ensuring your cloud environment is both optimized and secure.