Security Center provides classified protection compliance check and ISO 27001 compliance check to help you quickly assess whether your system meets relevant compliance requirements.
Background
Effective December 1, 2019, a series of standards including the Basic Requirements for Classified Protection of Cybersecurity (GB/T 22239-2019) took effect. Implementing the classified protection scheme is a basic obligation for every enterprise and organization. Alibaba Cloud provides the classified protection compliance check feature to help you quickly implement the classified protection scheme.
ISO 27001 is the international standard for information security management systems. ISO 27001 certification signifies that an organization's information security practices are internationally recognized, demonstrating its ability to provide secure and reliable information services to customers.
Prerequisites
Log on to the Security Center console. In the left-side navigation pane, choose .
(ISO 27001 compliance check only) If this is your first time using the feature, click Authorize Now to complete authorization. After authorization, the system can access your cloud resources and perform ISO 27001 compliance checks.
Classified protection compliance check
The classified protection compliance check covers your communication network, regional boundaries, compute environment, and management center to help you promptly identify and address security risks.
On the Security Compliance Check tab, view the check result statistics.
View the total number of check items and non-compliant items. In the Total Check Items and Non-compliant Items sections, view the total number of classified protection compliance check items and the number of non-compliant items. Click Non-compliant Items to view the list of non-compliant check items.
Online consultation for classified protection. Click Consult next to Contact Us to open a chat window and ask questions about classified protection. This service is available from 09:00 to 17:00 on weekdays.
Handle asset baseline issues. Click Click here to configure to go to the Baseline Check page and view and handle baseline issues on your assets. For more information, see View and handle baseline check results.
Search for a specific check item. In the search box, filter by check item category and compliance status, or enter the name of a check item to view matching results.
Remediate non-compliant check items. Follow the instructions under Improvement Suggestion to remediate each non-compliant check item.
NoteThe classified protection compliance check assesses whether your system has the required security capabilities, such as access control and log audit. You can pass the classified protection assessment only after you implement these capabilities and resolve all identified issues.
ISO 27001 compliance check
The ISO 27001 compliance check covers dimensions such as asset management, access control, cryptography, and operational security to help you meet ISO 27001 certification requirements.
ISO 27001 compliance checks run automatically. Each time you visit the check page, the system runs the check and provides the latest results. No manual trigger is required.
On the ISO 27001 Compliance Check tab, view the statistics and the list of check results.
View the total number of check items and non-compliant items. In the Total Check Items and Non-compliant Items sections, view the total number of ISO 27001 compliance check items and the number of non-compliant items.
View compliant, non-compliant, or in-progress check items. In the search box, set the search filter to Compliant, Non-compliant, or In Progress to view the corresponding list of check items.
Remediate non-compliant check items. Follow the instructions under Improvement Suggestion to remediate each non-compliant check item.
NoteRemediate non-compliant items promptly to meet ISO 27001 certification requirements.
What's next
After you complete compliance checks and remediate non-compliant items, verify the remediation results:
Re-check. Go back to the compliance check page. The system automatically runs the latest check. You can also refresh the page to get the latest results.
Track remediation progress. Periodically review changes in the number of non-compliant items to confirm that all issues are resolved.