Skip to main content

💼 53 Wholesale access to sensitive data (e.g. contents of customer databases or intellectual property that can be exploited for personal gain) would be highly restricted to reduce the risk exposure to significant data leakage events. Industry experience of actual data leakage incidents include the unauthorised extraction of debit/credit card details, theft of personally identifiable information, loss of unencrypted backup media and the sale/trade or exploitation of customer identity data.

  • ID: /frameworks/apra-cpg-234/20/53

Stats​

not available

Description​

Empty...

Similar​

  • Internal
    • ID: dec-c-0b43da79

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (34)​

PolicyLogic CountFlagsCompliance
🛡️ AWS EC2 Security Group allows unrestricted traffic to MongoDB🟢1🟢 x6no data
🛡️ AWS EC2 Security Group allows unrestricted traffic to Oracle DBMS🟢1🟢 x6no data
🛡️ AWS RDS Instance is publicly accessible🟢1🟢 x6no data
🛡️ AWS S3 Bucket is not configured to block public access🟢1🟢 x6no data
🛡️ Azure Cosmos DB Account Virtual Network Filter is not enabled🟢1🟢 x6no data
🛡️ Azure Managed Disk Public Network Access is not disabled🟢1🟢 x6no data
🛡️ Azure Network Security Group allows public access to MongoDB ports🟢1🟢 x6no data
🛡️ Azure Network Security Group allows public access to MSSQL port🟢1🟢 x6no data
🛡️ Azure Network Security Group allows public access to MySQL port🟢1🟢 x6no data
🛡️ Azure Network Security Group allows public access to PostgreSQL port🟢1🟢 x6no data
🛡️ Azure SQL Database allows ingress from 0.0.0.0/0 (ANY IP)🟢1🟢 x6no data
🛡️ Azure SQL Server Public Network Access is not disabled🟢1🟢 x6no data
🛡️ Azure Storage Account Allow Blob Anonymous Access is enabled🟢1🟢 x6no data
🛡️ Azure Storage Account Default Network Access Rule is not set to Deny🟢1🟢 x6no data
🛡️ Azure Storage Account Public Network Access is not disabled🟢1🟢 x6no data
🛡️ Azure Virtual Machine allows public access to MongoDB ports🟢1🟢 x6no data
🛡️ Azure Virtual Machine allows public access to MSSQL port🟢1🟢 x6no data
🛡️ Azure Virtual Machine allows public access to MySQL port🟢1🟢 x6no data
🛡️ Azure Virtual Machine allows public access to PostgreSQL port🟢1🟢 x6no data
🛡️ Azure VM Scale Set Instance allows public access to MongoDB ports🟢1🟢 x6no data
🛡️ Azure VM Scale Set Instance allows public access to MSSQL port🟢1🟢 x6no data
🛡️ Azure VM Scale Set Instance allows public access to MySQL port🟢1🟢 x6no data
🛡️ Azure VM Scale Set Instance allows public access to PostgreSQL port🟢1🟢 x6no data
🛡️ Google Cloud SQL Instance has public IP addresses🟢1🟢 x6no data
🛡️ Google GCE Network allows unrestricted traffic to Cassandra🟢1🟢 x6no data
🛡️ Google GCE Network allows unrestricted traffic to Elasticsearch🟢1🟢 x6no data
🛡️ Google GCE Network allows unrestricted traffic to Memcached🟢1🟢 x6no data
🛡️ Google GCE Network allows unrestricted traffic to MongoDB🟢1🟢 x6no data
🛡️ Google GCE Network allows unrestricted traffic to MySQL🟢1🟢 x6no data
🛡️ Google GCE Network allows unrestricted traffic to OracleDB🟢1🟢 x6no data
🛡️ Google GCE Network allows unrestricted traffic to PostgreSQL🟢1🟢 x6no data
🛡️ Google GCE Network allows unrestricted traffic to Redis🟢1🟢 x6no data
🛡️ Google Storage Bucket is anonymously or publicly accessible🟢1🟢 x6no data
🛡️ Oracle Storage Bucket allows public access🟢1🟢 x6no data

Internal Rules​

RulePoliciesFlags
✉️ dec-x-4f30f24e1
✉️ dec-x-16d413433
✉️ dec-x-30d6f14d1
✉️ dec-x-46a83a301
✉️ dec-x-60a4d8031
✉️ dec-x-85b34dad1
✉️ dec-x-87b8e6c71
✉️ dec-x-97f83e381
✉️ dec-x-0289e9c91
✉️ dec-x-539bc7d51
✉️ dec-x-656b34c93
✉️ dec-x-083928f51
✉️ dec-x-637372481
✉️ dec-x-aa8753bf1
✉️ dec-x-af1de99b1
✉️ dec-x-b17c005c1
✉️ dec-x-bb3a08511
✉️ dec-x-c236fa5f1
✉️ dec-x-d39d55dd1
✉️ dec-x-d127f4072
✉️ dec-x-de47b9383
✉️ dec-x-e88c387f1
✉️ dec-x-ec547a7c1
✉️ dec-x-efa79ed13
✉️ dec-x-f937c35f1
✉️ dec-x-fe1e9cf11