Compliance
The Compliance feature scans your clusters and reports them according to some out-of-the-box compliance industry standards, such as CIS Benchmarks for Docker and Kubernetes, Health Insurance Portability and Accountability Act (HIPAA), National Institute of Standards and Technology (NIST) Special Publications 800-190 and 800-53, and Payment Card Industry Data Security Standard (PCI DSS).
To run the compliance scan, navigate to the Compliance feature and click on the SCAN ENVIRONMENT button:
Figure 12.45 – Compliance feature
After some seconds, you will see the compliance report, as follows:
Figure 12.46 – Compliance report
We will not dive into each of these industry standards, as they are very specific to different industries. We encourage you to explore the feature, click on each graph, drill down, and check which controls are compliant and not compliant and why. Read the reference we left in the Further...