Add a built-in control to a custom standard, create a custom control for a custom standard, or edit a custom control for a custom standard.
You can use a built-in control, create a custom control, or edit a custom control in a custom standard.
Cortex Cloud provides built-in controls that cannot be edited or deleted. When you edit or create a custom standard you can add the built-in control.
You can create a new control that is tailored to your own business needs, standards, and organizational policies to use in a custom standard.
In the Controls catalog, click + Create Control.
Define control metadata, including:
Control name
Description (optional)
Category
Sub category (optional)
One or more custom standards to associate the control with
Click Create.
Assign a custom detection rule to the control as follows.
You can edit a copy of a built-in control or edit an existing custom control. You can also delete a custom control.
In the Controls catalog, click
on the built-in control you want to edit and click Save as new.To edit a custom control, click
on the custom control and click Edit.Click Next.
Define control metadata, including:
Control name
Description
Category
Sub category
Select one or more custom standards to associate the control with
Click Save.
If the control does not already contain a rule, assign a custom detection rule to the control.