CTEM Compliance
Compliance Standards refer to policies, rules, regulations, and guidelines that information technology (IT) organizations must follow to meet specific security, privacy, and operational requirements.
Regulatory bodies, industry organizations, or government agencies often establish these standards to promote best practices and protect sensitive information.
Adhering to compliance standards helps organizations mitigate risks, enhance cybersecurity, and maintain the trust of customers and stakeholders.
The following compliance standards are supported.
- CIS
- CYBER ESSENTIALS
- ESSENTIAL EIGHT
- DPDPA
- GDPR
- GPG 13
- HIPAA
- ISO 27002
- NIST 800 53
- NIST 800 171
- NIST CSF 2.0
- PCI-DSS
- SMB1001
Note: Compliance scans must be enabled for this data to appear. Please verify this under the “Compliance Scan” tab in CTEM Settings. Compliance types can be selected to enable or disable specific standards, as explained here.
This is a global view of how assets meet or fail compliance requirements and configuration checks.
The table will default to CIS compliance Type, Windows Desktop platform, and all Maturity levels.
This views how assets meet or fail compliance requirements and configuration checks.
- The green tile counts will indicate passes.
- Fails will be indicated by the red tiles.
You can switch between different Compliance Types, Platforms, and Maturity Levels to meet your needs and clients' compliance requirements.
You can tap on any tiles listed under Compliant, Non-Compliant, Manual Compliant, Manual Non-Compliant, Company, or Asset to see the details in the right-side Compliant pod.
| CTEM Compliance - Column Descriptions | |
| Column Heading | Description |
| Section | Displays specific section details from the selected Compliance Type. |
| Compliant | Displays the count of compliant controls by Compliance ID for the selected Compliance Type. |
| Non Compliant | Displays the count of non-compliant controls by Compliance ID for the selected Compliance Type. |
| Manual Compliant | Displays the count of manual compliant controls by Compliance ID for the selected Compliance Type. |
| Manual Non-Compliant | Displays the count of manual non-compliant controls by Compliance ID for the selected Compliance Type. |
| Company | Displays the number of companies that are affected. |
| Asset |
Displays the number of assets that are affected. Clicking on the number of Assets will take you to the Asset where you can view the Asset and Internal Checks
Note: Internal checks in Xcitium comes from the CIS compliance standard. All other frameworks (HIPAA, PCI, ISO, NIST, etc.) build on CIS as their base.
Always enable CIS along with any other compliance frameworks you need. This ensures internal checks appear in the portal.
|
| Note: Manual Compliant / Non-Compliant must be verified manually and generally has some type of uploaded evidence. |
| Compliant Pod - Column Descriptions | |
| Column Heading | Description |
| Compliance ID | Displays the CTEM issued ID to reference a specific compliance type check. Tap to see the Compliance Check Details. |
| Sub Section | Displays the name of the sub-section from the selected Compliance Type |
| Description | Displays the detailed description of the specific Compliance ID. |
| Assets | Displays the count of Assets affected by the selected Compliance ID. Tap the count to see the list of assets.  |