Use the dashboard of CSPM

This narrative-driven tutorial walks a Security Engineer through using the STACKIT CSPM Compliance dashboard to ensure compliance before a major security audit.

Step-by-step workflow

1. Initial Posture Assessment

   The Security Engineer logs into the STACKIT Portal and navigates to the CSPM dashboard. The UI provides a clear, unified view at the project level, offering complete transparency into misconfigurations and the current compliance status.

2. Filter for Violations

   Using the UI filters, the Engineer narrows down the findings to focus on policies that violate the BSI C5 or STACKIT Standard.

3. Review Mitigation Guidance

   The Engineer investigates the identified issues by selecting a specific policy from the “Monitored policy violations” list. The resulting policy description provides clear hints and guided mitigation steps, enabling the team to execute fixes to effectively mitigate risks.

4. Audit Readiness Check & Export

   After remediating the findings, the project is secure. The Engineer clicks the Export CSV button in the UI to generate a point-in-time compliance report. This provides auditors with concrete, tamper-evident proof that operations align with required regulations.