Creating a Prisma compliance report against a specific standard

A knowledge base article about Creating a Prisma compliance report against a specific standard provided by the UC Berkeley IT Service Hub - Knowledge Portal

There are more than 80 different compliance standards built into Prisma Cloud. If it is necessary to generate a report based on a compliance standard specific to a particular use case, like the CCPA (California Consumer Privacy Act) of 2018, the following steps will allow you to perform this evaluation yourself.

  1. If you are a Berkeley Cloud account admin, you can log into https://shib.berkeley.edu/idp/profile/SAML2/Unsolicited/SSO?providerId=https://app4.prismacloud.io/customer/21293f43c8b00f22462937db08d7acf9 using your CalNet Credentials.
  2. In the column on the left click “Compliance”
    The side menu column in Prisma with the Compliance submenu highlighted.
  3. In the Compliance submenu, select "Overview."
    The side menu column in Prisma with the Overview sub-menu of the Compliance section highlighted.
  4. At this point you will be in the “Compliance Overview” section.
  5. Use the “Add Filter” icon to add the correct “Compliance Standard”
    The image is that of the "Compliance Overview" screen with the filter 'funnel' icon selected. Below that is a list of filters and the "Compliance Requirement" filter is highlighted in a different color.
  6. From the new “Compliance Standard” filter that appears near the top, click on the down arrow next to “Select Compliance Standard”
  7. In the “Search” box that appears, type in the name of the standard or scroll through the list.
    The Compliance Standard filter with CCPA entered and a checkbox next to the standard to select it.
  8. When you find the standard you want to use, click the box next to it.
  9. The screen will now show an overview of the results of only that standard for all accounts you have access to in your current role.
  10. If you want a report out of it, click “Create Report” in the upper right hand corner.
  11. In the “Create Compliance Report” window, you will need to Name the report, and select a Cloud Type (AWS, Azure, or GCP). Beyond that there are several optional settings like specifing the Cloud Account (or accounts), select if it is a one time report or will be a recurring one, and provide an email address for where to send the report.
    The Create Compliance Report window with the report being named 'CCPA 2018 Report' and the cloud type set to 'AWS.' It also has been selected for a One Time report and no email address was provided.
  12. When the settings are complete, click “Save Report.”
  13. If an email address was not provided where the report should be sent, choose “Report” From the “Compliance” submenu on the left. (see step 4)
  14. When the report is completed, it can be downloaded from the “Compliance Reports” window.
    The 'Compliance Reports' window with an arrow point into the download button.
  15. You can now create any other reports necessary and logout when you are done.