Managing Check Items

Limitations and Constraints

• For custom check items, SecMaster does not check them immediately after they are created. You need to perform an immediate check manually or check the compliance pack the check items associated with. Then, you can get their check results.
• When you import check items, note the following restrictions:
  • Only .xlsx files can be imported.
  • Only one file can be imported at a time. Maximum file size: 100 records.
• Check items in built-in compliance packs can only be viewed and exported, but cannot be edited or deleted.

Viewing Check Items

1. Log in to the management console.
2. Click in the upper part of the page and choose Security > SecMaster.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
4. In the navigation pane on the left, choose Risk Prevention > Baseline Inspection. On the displayed page, click the Security Standards tab. Then, click the Check Item tab.
5. On the Check Item tab, view the information about existing check items. For details about the parameters, see Table 2.

   Table 2 Parameters for check items

   Parameter	Description
   Check Items	Total number of check items in the current workspace.
   Built-in Check Items	The number of check items preconfigured in SecMaster.
   Custom Check Items	The number of check items you create.
   Check item list	All check items and their basic information. In the check item list, you can view the description, type, and number of compliance packs used for a check item. You can also edit or delete custom check items. To display certain columns only, click the setting button in the upper right corner of the check item list and complete the settings (for example, whether to wrap lines and whether to fix the operation column). To view details about a check item, click its name. The details page is displayed on the right. On the check item details page, you can view the description, basic information, and compliance pack used for the check item.

Creating a Custom Check Item

1. Log in to the management console.
2. Click in the upper part of the page and choose Security > SecMaster.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
4. In the navigation pane on the left, choose Risk Prevention > Baseline Inspection. On the displayed page, click the Security Standards tab. Then, click the Check Item tab.
5. Click Create Check Item in the upper left corner of the check item list.
6. On the Create Check Item page, set check item parameters.

   Table 3 Parameters for creating check items

   Parameter	Description
   Check Item	Name you specify for the check item. It must meet the following requirements: Only letters, digits, underscores (_), periods (.), and hyphens (-) are allowed. Length: 1 to 256 characters
   Description	Description you provide for the check item. A maximum of 4,096 characters are allowed.
   Severity	Select the severity of the check item. Critical High Medium Low Informational
   Action	Select an action for the check item. Executed by workflows: The check item is automatically executed through a workflow you specify, and the check result is reported by the workflow as well. Executed manually: You will manually complete the check item offline.
   Select Workflow	If you set Action to Executed by workflows, you need to select a workflow. The Workflow Type must be Baseline Inspection. If no appropriate workflows are available, click Create Workflow and create one on the workflow page.
   Manual Check Items	If Action for a check item is set to Executed manually, SecMaster sets the check result options by default.
   Cloud Service	Enter the information about the cloud service associated with the check item. Enter 0 to 36 characters.

7. Click OK. You can filter check items by the created check item name on the check item page and view the basic information about the check items.
   

   For custom check items, SecMaster does not check them immediately after they are created. You need to perform an immediate check manually or check the compliance pack the check items associated with. Then, you can get their check results.

   You can edit or delete custom check items you add as required.

Ignoring a Check Item

If you have custom requirements for a check item, ignore the check item. For example, SecMaster checks whether the session timeout is set to 15 minutes, while you need to set it to 20 minutes. In this situation, ignore this check item so that SecMaster no longer executes this check.

An ignored check item will be no longer executed. It will not be counted when the Check Pass Rate is calculated.

1. Log in to the management console.
2. Click in the upper part of the page and choose Security > SecMaster.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
4. In the navigation pane on the left, choose Risk Prevention > Baseline Inspection. On the displayed page, click the Security Standards tab. Then, click the Compliance Pack tab.
5. Click the name of the target compliance pack to go to its details page.
6. Search for the target check item in the compliance pack list and click Ignore in the Operation column.
7. In the displayed dialog box, click OK. No check results will be displayed for ignored check items.
   

   • Ignored check items will be not executed. They will not be counted when the Check Pass Rate is calculated.
   • To resume an ignored check item, locate the row containing the ignored check item, and click Cancel Ignore in the Operation column. Then, in the displayed dialog box, click OK.

Importing Check Items

1. Log in to the management console.
2. Click in the upper part of the page and choose Security > SecMaster.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
4. In the navigation pane on the left, choose Risk Prevention > Baseline Inspection. On the displayed page, click the Security Standards tab. Then, click the Check Item tab.
5. In the upper left corner above the check item list, click Import.
6. In the dialog box displayed, click Download Template and complete the template.
7. In the displayed dialog box, click Add File and upload the completed template file.
   

   • Only .xlsx files can be imported.
   • Only one file can be imported at a time. Maximum file size: 100 records.

8. Click Import.
9. You can view the imported check items on the check item tab. You can filter check items by check item name.

Exporting Check Items

1. Log in to the management console.
2. Click in the upper part of the page and choose Security > SecMaster.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
4. In the navigation pane on the left, choose Risk Prevention > Baseline Inspection. On the displayed page, click the Security Standards tab. Then, click the Check Item tab.
5. Select check items you want to export from the check item list and click Export in the upper left corner above the list.
6. In the displayed dialog box, select the format and data columns you want.
7. Click Export.

Editing or Deleting a Check Item

1. Log in to the management console.
2. Click in the upper part of the page and choose Security > SecMaster.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
4. In the navigation pane on the left, choose Risk Prevention > Baseline Inspection. On the displayed page, click the Security Standards tab. Then, click the Check Item tab.
5. In the check item list, edit or delete a check item.

   Table 4 Editing or deleting a check item

   Operation	Description
   Editing a custom check item	Locate the target check item and click Edit in the Operation column. Edit settings and click OK. Then, filter check items by check item name on the check item tab and view the check item information. Only custom check items can be edited. Check items in built-in compliance packs cannot be edited.
   Deleting a custom check item	Locate the target check item and click Delete in the Operation column. In the displayed dialog box, confirm the deletion object, enter DELETE, and click OK. Only custom check items can be deleted. Check items in built-in compliance packs cannot be deleted.