ISO-27001 Security Management Standard Compliance

ID: pack:aliyun:iso-27001-compliance

Description

Compliance pack for ISO-27001 Information Security Management System standard. This pack helps organizations verify their cloud resources meet ISO-27001 security requirements.

Included Rules

• rule:aliyun:ack-cluster-node-multi-zone
• rule:aliyun:ack-cluster-public-endpoint-check
• rule:aliyun:alb-all-listener-health-check-enabled
• rule:aliyun:alb-instance-multi-zone
• rule:aliyun:ecs-available-disk-encrypted
• rule:aliyun:ecs-disk-auto-snapshot-policy
• rule:aliyun:ecs-in-use-disk-encrypted
• rule:aliyun:ecs-instance-enabled-security-protection
• rule:aliyun:ecs-running-instance-no-public-ip
• rule:aliyun:ecs-security-group-risky-ports-check-with-protocol
• rule:aliyun:ecs-snapshot-policy-timepoints-check
• rule:aliyun:elasticsearch-instance-enabled-data-node-encryption
• rule:aliyun:ess-scaling-group-attach-multi-switch
• rule:aliyun:fc-function-custom-domain-and-tls-enable
• rule:aliyun:fc-service-internet-access-disable
• rule:aliyun:fc-service-vpc-binding
• rule:aliyun:kms-key-rotation-enabled
• rule:aliyun:kms-secret-rotation-enabled
• rule:aliyun:maxcompute-project-encryption-enabled
• rule:aliyun:nas-filesystem-encrypt-type-check
• rule:aliyun:oss-bucket-logging-enabled
• rule:aliyun:oss-bucket-only-https-enabled
• rule:aliyun:oss-bucket-public-read-prohibited
• rule:aliyun:oss-bucket-public-write-prohibited
• rule:aliyun:oss-bucket-versioning-enabled
• rule:aliyun:oss-default-encryption-kms
• rule:aliyun:oss-zrs-enabled
• rule:aliyun:polardb-cluster-delete-protection-enabled
• rule:aliyun:polardb-cluster-enabled-ssl
• rule:aliyun:polardb-cluster-enabled-tde
• rule:aliyun:polardb-cluster-maintain-time-check
• rule:aliyun:polardb-cluster-multi-zone
• rule:aliyun:ram-group-has-member-check
• rule:aliyun:ram-policy-no-statements-with-admin-access-check
• rule:aliyun:ram-user-ak-create-date-expired-check
• rule:aliyun:ram-user-login-check
• rule:aliyun:ram-user-mfa-check
• rule:aliyun:ram-user-no-policy-check
• rule:aliyun:ram-user-no-policy-check
• rule:aliyun:rds-instance-enabled-log-backup
• rule:aliyun:rds-instance-maintain-time-check
• rule:aliyun:rds-multi-az-support
• rule:aliyun:rds-public-access-check
• rule:aliyun:redis-instance-backup-log-enabled
• rule:aliyun:slb-delete-protection-enabled
• rule:aliyun:slb-instance-log-enabled
• rule:aliyun:slb-listener-https-enabled
• rule:aliyun:vpc-flow-logs-enabled
• rule:aliyun:vswitch-available-ip-count