View your operational status

View the Operational Status modules for a list of the CIS Controls and technology Controls. Each control also includes the technology used to validate compliance, type of indicator template available, and the control's source table.

Before you begin

Role required: admin or sn_compliance.reader

About this task

Starting with Version 12.0.2, the Operational Status modules provide a view of all of your CIS Controls and/or ISO 27002-based indicator templates mapped to specific CIS/ISO controls in one place. This information can be useful for monitoring your controls and the health of your system. The application is able to scan your instance and determine which controls you have implemented, along with the various technologies available for validating each control and protecting your data.

Beginning with the Australia release, Technology Controls Monitoring Accelerator provides pre-packaged CIS v8 controls and indicator templates.

Procedure

1. Navigate to All > Technology Controls Monitoring > Operational Status.

   You can view the module as shown in the example.

   

   Note:

   The CIS controls module is renamed from CIS controls @R to Cybersecurity Controls. The Indicator Templates module is renamed to CIS Indicator Templates.
2. Select either CIS Controls or Technology Controls.
   Note:

   The screen shown below results from selecting CIS Controls. The default columns will be slightly different if you select Technology Controls. However, you can select the gear icon to add or remove columns as needed.

   Figure 1. Indicator templates operational status

   

   Each control includes the following information.

   Table 1. Operational Status

   Field	Description
   Controls	The controls included when you download and activate the Cybersecurity Controls Accelerator application.
   Control family and description	The family and description of the control as defined in the CIS Controls.
   Domain	Domains of the controls: Basic Foundational Organizational
   Implementation Group (IG)	The implementation group to which the control is included: IG1, IG2, or IG3. IG1 covers most of the essential security controls to serve as a foundation. Then, as needed to improve your security posture, you can add IG2 and IG3 to provide additional levels of support. As illustrated here, IG2 includes all of the controls included in IG1, and IG3 includes all of the controls in IG1 and IG2.
   Compliance validated by	The technology on your instance you can use to automate the validation of your controls.
   Validating technology activated?	Identifies whether the specified technology is activated in your instance.
   Controls implemented?	Identifies whether you have adopted the control objective and deployed it in your system.
   Indicator template type	Identifies whether you have an indicator template type defined so you can begin validating and monitoring the control. The available types are Basic, Manual, and Script.
   Source table	The source table for the data being monitored by the control.