1. About Prisma Cloud CSPM

First, a quick rundown of what Prisma Cloud CSPM is: Prisma Cloud is an integrated platform for addressing security and compliance challenges in cloud environments. The CSPM feature is a solution for monitoring and reporting on excessive privileges, misconfigurations, and compliance with security policies and regulatory requirements for your cloud infrastructure.

2. Report function

The reporting function plays an important role in Prisma Cloud's CSPM. By simply checking the reports that are output periodically without accessing the GUI, you can understand the general issues, the affected assets, and how to deal with them. Another strength of Prisma Cloud's reporting function is that it can output only the necessary content and send it periodically to those who need it.

It can also output reports that can be used to share information with management, ranging from a summary of alerts that developers need to take note of to status of adherence to specific compliance policies.

For example, instead of checking a single alert individually, you can check all alerts within a certain period of time at once, which is very useful when you need to submit or save alerts within a period of time for routine work or audit purposes. By sharing only the necessary alert information, you can create a system that encourages action without issuing access IDs to the GUI for each person in charge, people in other departments, or cooperating companies.

Specific benefits of the report can be summarised as follows:

• Compliance monitoring:
  At a glance, you can see whether your cloud environment is complying with security policies and regulatory requirements.
• Risk Identification:
  You can mitigate risk by identifying activities and configurations that violate security policies and regulatory requirements.
• Guidelines for improvement:
  It provides remediation for identified issues and offers guidance for improving security and compliance.

3. Trying out the report function

There are three types of reports that can be output with Prisma Cloud, and each one can be used for different analysis purposes.

• Cloud Security Report:
  It allows you to check how much Prisma Cloud functionality is being used and what kind of security is being applied. It also helps you understand the trends of alerts that have occurred over a certain period of time. This is the most summary-based report of the three types.
• Compliance:
  It helps you select a specific compliance policy and understand how well you are complying with it. You can view a summary of the selected compliance policy and any current alerts for it.
• Alerts:
  You can specify a specific environment and output open alerts for it. You can check the total amount and content of alerts for each environment that each person in charge needs to handle without checking the console.

Summary

In this article, we have written about implementing the Prisma Cloud reporting function and reviewing the actual reports. The Prisma Cloud reporting function is a valuable tool for clearly showing compliance with security policies and risks in cloud environments and for proving compliance with audits and regulatory requirements.

As companies rapidly make use of the cloud, it has become increasingly difficult for a specific department to exercise overall control alone. However, by utilizing this function, you can easily generate the information required for cloud security audits and provide the necessary data, which can then be used to set up operations in which each relevant party and department can respond to alerts autonomously. This is a very effective method, so please consider using it.

Related video: "Achieving Secure Application Development -Improving Security Baselines with Posture Management-"
Providing a secure work environment for employees is a common challenge for all businesses. Suppression of security incidents is also recognized as a major issue in application development sites, but there are situations in which developers have to lower the priority of security due to unique reasons, and the importance of security is neglected. is not uncommon. In this session, we will explain Posture Management, a preventive solution for implementing the minimum mechanism necessary to reduce the probability of security incidents in the development environment and significantly improving the security baseline.