Compliance check
Security Center provides classified protection compliance check and ISO 27001 compliance check to help you quickly assess whether your system meets relevant compliance requirements.
Background
Effective December 1, 2019, a series of standards including the Basic Requirements for Classified Protection of Cybersecurity (GB/T 22239-2019) took effect. Implementing the classified protection scheme is a basic obligation for every enterprise and organization. Alibaba Cloud provides the classified protection compliance check feature to help you quickly implement the classified protection scheme.
ISO 27001 is the international standard for information security management systems. ISO 27001 certification signifies that an organization's information security practices are internationally recognized, demonstrating its ability to provide secure and reliable information services to customers.
Prerequisites
Log on to the Security Center console. In the left-side navigation pane, choose .
(ISO 27001 compliance check only) If this is your first time using the feature, click Authorize Now to complete authorization. After authorization, the system can access your cloud resources and perform ISO 27001 compliance checks.
Classified protection compliance check
The classified protection compliance check covers your communication network, regional boundaries, compute environment, and management center to help you promptly identify and address security risks.
Optional: Above the Security Compliance Check tab, on the right side of the Alibaba Cloud Public Cloud Classified Protection Compliance Whitepaper 2.0 message, click and submit a document download request. to download the classified protection 2.0 solution package.
On the page that appears, fill in the required information and submit the form. After approval (approximately 2 to 4 business days), the classified protection 2.0 solution package will be sent to your email address.
NoteThe package includes the following materials:
Free professional guidance from Alibaba Cloud security architects
Classified protection 2.0 solution presentation
Sales licenses for security products
Alibaba Cloud platform classified protection filing certificate
Classified protection assessment report
Alibaba Cloud Public Cloud Classified Protection Compliance Whitepaper 2.0, which describes how Alibaba Cloud helps customers build a security compliance system based on classified protection.
On the Security Compliance Check tab, view the check result statistics.
View the total number of check items and non-compliant items. In the Total Check Items and Non-compliant Items sections, view the total number of classified protection compliance check items and the number of non-compliant items. Click Non-compliant Items to view the list of non-compliant check items.
Learn about the classified protection compliance 2.0 security solution. Alibaba Cloud provides a classified protection compliance 2.0 security solution to help you pass the classified protection assessment. Click View Classified Protection Best Practices below the Best Practices for Hierarchical Protection section for more information.
Online consultation for classified protection. Click Consult next to Contact Us to open a chat window and ask questions about classified protection. This service is available from 09:00 to 17:00 on weekdays.
Handle asset baseline issues. Click Click here to configure to go to the Baseline Check page and view and handle baseline issues on your assets. For more information, see View and handle baseline check results.
Search for a specific check item. In the search box, filter by check item category and compliance status, or enter the name of a check item to view matching results.
Remediate non-compliant check items. Follow the instructions under Improvement Suggestion to remediate each non-compliant check item.
NoteThe classified protection compliance check assesses whether your system has the required security capabilities, such as access control and log audit. You can pass the classified protection assessment only after you implement these capabilities and resolve all identified issues. For more information, see Classified Protection Compliance 2.0 Security Solution.
ISO 27001 compliance check
The ISO 27001 compliance check covers dimensions such as asset management, access control, cryptography, and operational security to help you meet ISO 27001 certification requirements.
ISO 27001 compliance checks run automatically. Each time you visit the check page, the system runs the check and provides the latest results. No manual trigger is required.
On the ISO 27001 Compliance Check tab, view the statistics and the list of check results.
View the total number of check items and non-compliant items. In the Total Check Items and Non-compliant Items sections, view the total number of ISO 27001 compliance check items and the number of non-compliant items.
View compliant, non-compliant, or in-progress check items. In the search box, set the search filter to Compliant, Non-compliant, or In Progress to view the corresponding list of check items.
Remediate non-compliant check items. Follow the instructions under Improvement Suggestion to remediate each non-compliant check item.
NoteRemediate non-compliant items promptly to meet ISO 27001 certification requirements.
What's next
After you complete compliance checks and remediate non-compliant items, verify the remediation results:
Re-check. Go back to the compliance check page. The system automatically runs the latest check. You can also refresh the page to get the latest results.
Track remediation progress. Periodically review changes in the number of non-compliant items to confirm that all issues are resolved.