Continuous compliance monitoring

In a regulated organization, compliance takes precedence as it is mandated by regulations; however, compliance is now generally enforced by all security-conscious organizations, regardless of regulations. SCC provides the ability to continuously monitor your Google Cloud compliance posture by doing the following:

• Identifying compliance violations in your Google Cloud assets helps you resolve them by following actionable suggestions
• Reviewing and exporting compliance reports to ensure all your resources are meeting their compliance requirements
• Supporting compliance standards, such as these:
  • Payment Card Industry Data Security Standard (PCI DSS v3.2.1)
  • International Organization for Standardization (ISO 27001)
  • National Institute of Standards and Technology (NIST 800-53)
  • Center for Internet Security (CIS) 1.0 and 1.1 benchmarks

Now let us look at how SCC supports these standards.

CIS benchmarks

SCC supports the following CIS benchmarks...