Add NIST SP 800-171 Rev. 2 benchmark Closes #435 #453

rajlearner17 · 2022-07-11T10:19:33Z

Checklist

Issue(s) linked

OK ........................................................................................................................................................................ 14,504 [========  ]
SKIP ......................................................................................................................................................................... 148 [=         ]
INFO ........................................................................................................................................................................... 7 [=         ]
ALARM ...................................................................................................................................................................... 5,720 [===       ]
ERROR .......................................................................................................................................................................... 0 [          ]

HIGH .................................................................................................................................................................. 1 /     65 [==        ]

TOTAL ............................................................................................................................................................. 5,720 / 20,379 [==========]

…ompliance into nist-800-171

conformance_pack/rds.sp

misraved · 2022-07-14T07:18:30Z

README.md

@@ -21,6 +21,7 @@ Institutions Examination Council (FFIEC)](https://hub.steampipe.io/mods/turbot/a
 * [HIPAA](https://hub.steampipe.io/mods/turbot/aws_compliance/controls/benchmark.hipaa)
 * [NIST 800-53 Revision 4](https://hub.steampipe.io/mods/turbot/aws_compliance/controls/benchmark.nist_800_53_rev_4)
 * [NIST 800-53 Revision 5](https://hub.steampipe.io/mods/turbot/aws_compliance/controls/benchmark.nist_800_53_rev_5)
+* [NIST SP 800-171 Revision 2](https://hub.steampipe.io/mods/turbot/aws_compliance/controls/benchmark.nist_800_171_rev_2) 🚀 New!


Suggested change

* [NIST SP 800-171 Revision 2](https://hub.steampipe.io/mods/turbot/aws_compliance/controls/benchmark.nist_800_171_rev_2) 🚀 New!

* [NIST 800-171 Revision 2](https://hub.steampipe.io/mods/turbot/aws_compliance/controls/benchmark.nist_800_171_rev_2) 🚀 New!

misraved · 2022-07-14T07:23:34Z

conformance_pack/rds.sp

    nist_800_53_rev_4           = "true"
    nist_800_53_rev_5           = "true"
    nist_csf                    = "true"
+    nist_800_171_rev_2          = "true"


Suggested change

nist_800_53_rev_4 = "true"

nist_800_53_rev_5 = "true"

nist_csf = "true"

nist_800_171_rev_2 = "true"

nist_800_171_rev_2 = "true"

nist_800_53_rev_4 = "true"

nist_800_53_rev_5 = "true"

nist_csf = "true"

misraved · 2022-07-14T07:24:58Z

conformance_pack/rds.sp

    nist_800_53_rev_5      = "true"
    nist_csf               = "true"
+    nist_800_171_rev_2     = "true"


Suggested change

nist_800_53_rev_5 = "true"

nist_csf = "true"

nist_800_171_rev_2 = "true"

nist_800_53_rev_5 = "true"

nist_800_171_rev_2 = "true"

nist_csf = "true"

misraved · 2022-07-14T07:28:15Z

conformance_pack/rds.sp

@@ -232,6 +252,16 @@ control "rds_db_instance_automatic_minor_version_upgrade_enabled" {
  })
 }

+control "rds_db_cluster_deletion_protection_enabled" {
+  title       = "RDS clusters should have deletion protection enabled"
+  description = "This control checks whether RDS clusters have deletion protection enabled. This control is intended for RDS DB instances. However, it can also generate findings for Aurora DB instances, Neptune DB instances, and Amazon DocumentDB clusters. If these findings are not useful,then you can suppress them."


As per the description, does the AWS config evaluate RDS DB instances as well? Does it also evaluate Neptune DB instances, and Amazon DocumentDB clusters?

misraved · 2022-07-14T07:31:58Z

docs/index.md

@@ -34,6 +34,8 @@ Run individual configuration, compliance and security controls or full complianc

 [NIST CSF](https://www.nist.gov/cyberframework) provides security standards for managing and reducing cybersecurity risk.

+[NIST SP 800-171](https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final) provides minimum baselines of security controls for protecting the confidentiality of Controlled Unclassified Information (CUI) in nonfederal systems and organizations, and recommends specific security requirements to achieve that objective.


Suggested change

[NIST SP 800-171](https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final) provides minimum baselines of security controls for protecting the confidentiality of Controlled Unclassified Information (CUI) in nonfederal systems and organizations, and recommends specific security requirements to achieve that objective.

[NIST 800-171](https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final) provides minimum baselines of security controls for protecting the confidentiality of Controlled Unclassified Information (CUI) in nonfederal systems and organizations, and recommends specific security requirements to achieve that objective.

Should the reference links be updated to use NIST 800-171 instead of NIST SP 800-171 ?

nist_800_171_rev_2/cm.sp

misraved · 2022-07-14T07:59:30Z

nist_800_171_rev_2/ia.sp

+    benchmark.nist_800_171_rev_2_3_5_7,
+    benchmark.nist_800_171_rev_2_3_5_8,
+    benchmark.nist_800_171_rev_2_3_5_10
+


Suggested change

misraved

Minor changes around the ordering of tags

rajlearner17 added 6 commits July 5, 2022 17:01

Add nist-800-172-rev2 controls

d0d1925

Additional controls

a8fbe72

updates

63e3c47

Merge branch 'release/v0.39' of github.com:turbot/steampipe-mod-aws-c…

45675d9

…ompliance into nist-800-171

updates

c1f8657

Updates with doc changes

2b316f2

rajlearner17 requested a review from khushboo9024 July 11, 2022 10:19

Formatting update

b288d28

misraved reviewed Jul 12, 2022

View reviewed changes

conformance_pack/rds.sp Outdated Show resolved Hide resolved

Controls with updated tags

cfcf970

rajlearner17 requested a review from vkumbha July 12, 2022 10:00

rajlearner17 and others added 3 commits July 13, 2022 11:34

Updated title for 3.1.1 & description

83ef604

Update titles

398419c

Update control tags

73068a7

rajlearner17 linked an issue Jul 13, 2022 that may be closed by this pull request

Add NIST SP 800-171 Rev. 2 benchmark #435

Closed

rajlearner17 removed the request for review from khushboo9024 July 13, 2022 12:13

Updates to the tag

4ebc3b6

rajlearner17 marked this pull request as draft July 13, 2022 15:07

Updated doc

2880764

rajlearner17 marked this pull request as ready for review July 13, 2022 15:35

misraved reviewed Jul 14, 2022

View reviewed changes

nist_800_171_rev_2/cm.sp Show resolved Hide resolved

misraved reviewed Jul 14, 2022

View reviewed changes

rajlearner17 added 2 commits July 14, 2022 16:18

Tidy up tags

791cc5a

updates

759bc98

rajlearner17 and others added 3 commits July 14, 2022 16:34

Updates

c3b6638

Update ca.sp

4e2726f

Update au.sp

71b7762

misraved approved these changes Jul 14, 2022

View reviewed changes

misraved merged commit bbf1687 into release/v0.39 Jul 14, 2022

misraved deleted the nist-800-171 branch July 14, 2022 12:27

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add NIST SP 800-171 Rev. 2 benchmark Closes #435 #453

Add NIST SP 800-171 Rev. 2 benchmark Closes #435 #453

rajlearner17 commented Jul 11, 2022 •

edited

Loading

misraved Jul 14, 2022

misraved Jul 14, 2022

misraved Jul 14, 2022 •

edited

Loading

misraved Jul 14, 2022

misraved Jul 14, 2022

misraved Jul 14, 2022

misraved left a comment

	* [NIST SP 800-171 Revision 2](https://hub.steampipe.io/mods/turbot/aws_compliance/controls/benchmark.nist_800_171_rev_2) 🚀 New!
	* [NIST 800-171 Revision 2](https://hub.steampipe.io/mods/turbot/aws_compliance/controls/benchmark.nist_800_171_rev_2) 🚀 New!

		@@ -34,6 +34,8 @@ Run individual configuration, compliance and security controls or full complianc

		[NIST CSF](https://www.nist.gov/cyberframework) provides security standards for managing and reducing cybersecurity risk.

		[NIST SP 800-171](https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final) provides minimum baselines of security controls for protecting the confidentiality of Controlled Unclassified Information (CUI) in nonfederal systems and organizations, and recommends specific security requirements to achieve that objective.

	[NIST SP 800-171](https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final) provides minimum baselines of security controls for protecting the confidentiality of Controlled Unclassified Information (CUI) in nonfederal systems and organizations, and recommends specific security requirements to achieve that objective.
	[NIST 800-171](https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final) provides minimum baselines of security controls for protecting the confidentiality of Controlled Unclassified Information (CUI) in nonfederal systems and organizations, and recommends specific security requirements to achieve that objective.

Add NIST SP 800-171 Rev. 2 benchmark Closes #435 #453

Add NIST SP 800-171 Rev. 2 benchmark Closes #435 #453

Conversation

rajlearner17 commented Jul 11, 2022 • edited Loading

Checklist

misraved Jul 14, 2022

Choose a reason for hiding this comment

misraved Jul 14, 2022

Choose a reason for hiding this comment

misraved Jul 14, 2022 • edited Loading

Choose a reason for hiding this comment

misraved Jul 14, 2022

Choose a reason for hiding this comment

misraved Jul 14, 2022

Choose a reason for hiding this comment

misraved Jul 14, 2022

Choose a reason for hiding this comment

misraved left a comment

Choose a reason for hiding this comment

rajlearner17 commented Jul 11, 2022 •

edited

Loading

misraved Jul 14, 2022 •

edited

Loading