Report for PCI Compliance

(imported topic written by arpotu91)

Hello,

I just got a request from my compliance team to provide the following information in a BigFix report. There are other items they need, but we’re already pulling that information, so I won’t include it here. Is there a way to pull these items via BigFix:

  1. Password policy (maximum password age, minimum password age, password length, complexity)

  2. Account lockout policy (lockout duration, lockout threshold, account lockout reset timing)

  3. Audit policy

Thanks,

Arpotu

(imported comment written by BenKus)

Yes. The Security Policy Manager site has these… Or these checks are included in our newer SCM Fixlet sites.

Ben