How Secure Are Your Cloud Applications and Workloads? Discover with Check Point’s FREE Cloud Security Posture Assessment

WHY IT MATTERS The increasing prevalence of cyber-attacks and security breaches is a growing concern for organizations, particularly as current defensive strategies have proven insufficient. The Check Point Cloud Security Report indicates that:

» 61% of organizations have experienced a cloud security incident this year. » 21% of these incidents have resulted in data breaches. » Only 4% of organizations can swiftly and effortlessly mitigate risks.

This significant surge underscores the urgent need for robust cloud security measures to manage risks, enhance visibility, and proactively address threats.

WHAT DETAIL DOES THE CLOUD SECURITY REPORT GIVE ME AND MY TEAM?

» List of all publicly exposed storage accounts » Publicly exposed assets (VMs, RDP, DBs) » Overly permissive accounts & serverless functions » Compliance posture (CIS, ISO, Best Practices) » Recommendations to mitigate findings

CONTACT OUR TEAM: Hendrik de Bruin Head of SADC Security Consulting | Security Evangelist with the Office of the CTO Mobile: +27 832942980 | Email Address: hendrikd@checkpoint.com

Saad Nizam Cloud Security Architect Mobile: +971568749288 | Email Address: nizams@checkpoint.com

HOW MUCH TIME DOES A FREE CLOUD SECURITY POSTURE ASSESSMENT? Once you sign up:

» Our team will schedule a 20-minute initial call to agree on the assessment scope.

» Set up read permissions for Check Point CNAPP. » 120 minutes for the Report & Recommendations.

WHAT IS INCLUDED IN THE OFFER? Check Point would like to assist you and your organization by providing a Free Cloud Security Posture Assessment of your current Public Cloud environment. This assessment will ensure that you gain insight into current misconfigurations and vulnerabilities so you can remediate the associated risks before they are exploited.

» Reporting on compliance adherence including: • CIS • NIST • GDPR

» Cloud Service Provider Best Practices » Visibility into Cloud Misconfigurations

© 2023 Check Point Software Technologies Ltd. All Rights Reserved Page 2 of 13 [Confidential]

Contents CLOUD SECURITY POSTURE ASSESSMENT REPORT – SAMPLE ...................................... 1 Summary and Recommendations .............................................................................................. 3 Assessment scope is related primarily to following areas: .......................................................... 3

Most important non-compliant assets .................................................................................. 3 High level recommendations: .............................................................................................. 3

Public Exposure ......................................................................................................................... 4 List of publicly exposed resources .......................................................................................... 4 List of potentially exposed storage accounts .......................................................................... 5 List of publicly exposed virtual machines ................................................................................ 6 List of publicly exposed Databases ......................................................................................... 7

Overly Permissive Accounts ....................................................................................................... 8 Overview of overly permissive assets ..................................................................................... 8 Top Accounts with high permissions and risk score ................................................................ 9

Serverless .................................................................................................................................10 Overview of serverless functions with security findings ..........................................................10 Top Serverless Functions with high permissions and risk score ............................................11

Security Standards Compliance Report ....................................................................................12 Compliance validation against CIS Foundations ....................................................................12 Compliance validation against Check Point CloudGuard Best practices ................................12

Appendix: Mitre Cloud Matrix ....................................................................................................13

© 2023 Check Point Software Technologies Ltd. All Rights Reserved Page 3 of 13 [Confidential]

Summary and Recommendations Assessment scope is related primarily to following areas: Area Compliance Status Initial Risk

Publicly exposed storage accounts Non - compliant Data leakage

Publicly exposed assets (VM’s, RDP, DB’s) Partial Persistent access

Overly permissive Accounts Warning Persistent access

Overly permissive Serverless Non - compliant Persistent access

Most important non-compliant assets

High level recommendations: • Review list of exposed storage accounts, disable anonymous access for relevant

accounts/S3 buckets • Disable public access for relevant exposed assets, apply network security rulesets to

allow only connections from trusted sources • Implement least privilege access* • Enable MFA and conditional access for privileged accounts

* to understand ‘real’ permissions needed, you can leverage either cloud native tools (e.g AWS IAM Access Analyzer, Azure Monitor/ Microsoft Entra Permissions Management) or 3rd party tool as Check Point CIEM

CLICK HERE TO SCHEDULE: Free Cloud Security Posture Assessment

» View of Cloud Vulnerabilities » Current Cloud Exposure » Risk Prioritization to ensure “Effective Risk Management.”

» Concise Remediation Steps to assist with remediation.

mailto:hendrikd%40checkpoint.com?subject= mailto:nizams%40checkpoint.com?subject= https://bit.ly/FreeCloudSecurityPostureAssessment https://bit.ly/FreeCloudSecurityPostureAssessment