Report for PCI Compliance

Reporting
1

(imported topic written by arpotu91)

Hello,

I just got a request from my compliance team to provide the following information in a BigFix report. There are other items they need, but we’re already pulling that information, so I won’t include it here. Is there a way to pull these items via BigFix:

  1. Password policy (maximum password age, minimum password age, password length, complexity)

  2. Account lockout policy (lockout duration, lockout threshold, account lockout reset timing)

  3. Audit policy

Thanks,

Arpotu

2

(imported comment written by BenKus)

Yes. The Security Policy Manager site has these… Or these checks are included in our newer SCM Fixlet sites.

Ben