We'd like you to request improvement of the judge logic of Control ID 1.18(3000018).
Our request is : Without editing the "Expected Values" by the end user, the SCC tool can detect the goal automatically.
In other words "SCC should detect the regions where activity tracker to be configured."
Back ground:
In the case(CS2450440) your team told us the step.
1. Go to "Security and Compliance" -> Configure -> settings -> "Goal parameters" tab
2. Expand 'CIS IBM Benchmark control inputs (Expected Values) (4)' and click edit from menu
3. Update the regions where the customer operates in the values for 'List of regions where activity tracker to be configured'
But this guide is not a real complicance check.
(End user can edit the goal even if the reqions of activity tracker to be configured can be detected technically.)
Thank you.
| Idea priority | Medium |
By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.
There is a new rule "Check that there is an Activity Tracker event route defined in each region to collect location-based events"
This new rule provides more flexibility where rule offers checks for all regions. With this new rule, this requirements is fully met.