Security posture dashboard

Security dashboard displays tenant or device level compliance status. It helps the organizations in prioritizing resolution for the devices which are not compliant. Also, it prevents the security threats specific to weak security configuration.

  • Compliance evaluation - While presenting dashboard, various IBM FlashSystem, IBM SAN Volume Controller (SVC), IBM Storwize, and IBM DS8000 command and configuration parameters specific to security configurations of the devices are evaluated whether they are compliant or non-compliant by comparing them to IBM product recommended security guidelines.
  • Standards - A combination of NIST 800-209 standard and IBM product specific guidelines and recommendations are referred while defining standards for various parameters.
Note: It is recommended to upgrade the firmware, if none of the supported parameters are available for the device.

This approach is applicable to IBM FlashSystem, IBM SAN Volume Controller (SVC), IBM Storwize, and IBM DS8000 storage systems only. Security posture is derived through the data fetched from Call Home and Data Collector.

The security dashboard can be divided into: