Configuring a Baseline Inspection Plan

Scenario

You can configure a baseline inspection plan and let SecMaster check whether there are unsafe baseline settings on your assets.

This document describes how to add, edit, and delete a baseline inspection plan.

Background

SecMaster uses the default check plan to check all assets. By default, the default check plan works as follows:

• Schedule: The default check plan checks your assets every three days from 00:00 to 06:00.
• Objects: All assets under your account in the current region will be checked.

Limitations and Constraints

A security standard can be added to only one check plan.

Prerequisites

You have purchased the SecMaster basic edition or professional edition.

Creating a Check Plan

1. Log in to the management console.
2. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
3. In the navigation pane, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Workspace management page
   

4. In the navigation tree on the left, choose Risk Prevention > Baseline Inspection. On the Baseline Inspection page, click Configure Check Plan.
   Figure 2 Accessing the page for configuring check plans
   

5. On the Checks page, select a region for the plan and click Create Plan. The pane for creating a check plan is displayed on the right.
6. Configure the check plan.
   1. Enter the basic information by referring to Table 1.

      Table 1 Basic information about a check plan

      Parameter	Description
      Name	Plan name
      Schedule	Select how often and when the check plan is executed. Schedule: every day, every 3 days, every 7 days, every 15 days, or every 30 days Check start time: 00:00-06:00, 06:00-12:00, 12:00-18:00, or 18:00-24:00

   2. Select a security standard for the plan.

      Select the baseline check items to be checked.

7. Click OK.

   After the check plan is created, SecMaster performs cloud service baseline scanning at the specified time. You can choose Risk Prevention > Baseline Inspection to view the scan result.

Related Operations

After a baseline check plan is created, you can view, edit, or delete the check plan.

• Viewing a check plan
  1. In the navigation pane on the left, choose Settings > Checks.
  2. On the Checks page, view the check plans of baseline inspection.
• Editing a check plan
  Only user-defined check plans can be modified.

  1. In the navigation pane on the left, choose Settings > Checks.
  2. In the upper right corner of the check plan box, click Edit. The pane for editing the check plan is displayed on the right.
  3. After editing the plan parameters, click OK.
• Deleting a check plan
  Only user-defined check plans can be deleted.

  1. In the navigation pane on the left, choose Settings > Checks.
  2. In the upper right corner of the check plan box, click Delete.
  3. In the displayed dialog box, click OK.