Security and Compliance

[Dave Brassey]

Hi There, do you have any information or training on how we can implement a security and compliance program within the CMDB / Service Management tools you have?

Specifically to be able to associate certain sets of security controls to an asset type (for instance a Laptop has associated with it controls such as EDR installed, MDM installed, etc, A server controls such as password rules, uninstall unused services etc) 

Secondly to be able to capture compliance evidence against the asset (i.e. checklists signed off, scan reports etc)

Thanks in advance

Dave

[Pramodh M]

Hi @Dave Brassey 

Welcome to the community 🙂

So asset management, yes here it is

I suggest you go through this course, and you will be able to create a object schema and objects, dependencies, etc. You just have to map the assets externally making a document which will make it easier to then configure the same in JSM

https://university.atlassian.com/student/activity/971163-insight-essentials-course-description

Right out of the box, I haven't seen any examples in internet on the requirement

Let me know if you have any query

Thanks,

Pramodh

[Dave Brassey]

Thanks Pramodh, but I think spending $400 on this course without knowing it will handle compliance is a bit rich to expect someone to do.

I'll leave the question open and hopefully someone else will be able to help me.

Kind regards

Dave