Describing Cloud Security Posture Management (CSPM)
Chapter 2, Describing Security Methodologies, discussed the layers of a defense-in-depth security strategy. Chapter 8, Describing Basic Security Services and Management Capabilities in Azure, described some of the Azure solutions that can be used to protect these layers of defense. Simply enabling and deploying these solutions into your infrastructure is not enough. You should also have a strategy for how you are going to monitor and manage these layers of defense within your infrastructure.
CSPM is the method for monitoring and managing these defenses to audit, assess, and identify potential vulnerabilities and threats that may be within your infrastructure. This constant process allows you to address the possibility of potential attacks before they take place and be diligent and proactive in the changing threat landscape and evolving cloud infrastructure.
A strong CSPM solution evaluates and provides the following features...
