Stay compliant with Security Posture Management

Latest Dynatrace

Early Adopter

In this tutorial you will learn how Security Posture Management can help you stay compliant with the security hardening guidelines and regulatory compliance standards.

Target audience

This tutorial is dedicated to Security Ops Engineers, DevOps, DevSecOps, and Site Reliability Engineers (SREs).

Scenario

Your organization requires following Industry best practices or regulatory requirements.
New workloads are constantly added or removed from your environment.

Goal

Gain immediate insight into the overall security posture of your monitored environment.
Detect and address security issues and misconfigurations easily.
Ensure your environment is configured securely and efficiently.
Enhance the overall system reliability.
Stay compliant with security standards.

Prerequisites

Deploy Kubernetes Security Posture Management
Install Security Posture Management app
1. In Dynatrace, open Dynatrace Hub.
2. Look for Security Posture Management and select Install.

Get started

Review results

Search for relevant information

Gather insights

Define compliance strategy

Define monitoring for compliance

Create notifications

Review results

Open Security Posture Management app xSPM and review

The Assessment results
The compliance status
- For the whole environment
- For specific systems

Search for relevant information

Use the filtering and sorting options to gather insights about problems in your environment.

Gather insights

Define which rules are relevant based on contextual insights.

Define compliance strategy

Fix configuration issues for rules with the highest priority in a narrow context (for example, on a single cluster).
Monitor compliance and operation for a while.
If everything works fine, roll out the fix to other environments.

Define monitoring for compliance

There are two ways:

Use Security Posture Management app xSPM to monitor that

The compliance standard percentage is increasing.
The total number of assessed resources with the Passed result is increasing.

For easy management and to compare results, you can download results as a CSV file.

Use Security Investigator or Notebooks to monitor

The history of results per standard or rule, per cluster or environment.
That the resource assessment result for a specific set of rules remains Passed.

For a list of DQL examples based on compliance events that you can use, see Query compliance events.

Create notifications

Create a workflow to send an alert on your desired channel if the previously Passed rule turns into Failed.

Further resources

Security Posture Management