Week 27, 2023

Despite the dampened mood from the weather ruining a few BBQs and fireworks last week, fret not! There are some exciting new updates to check settings and security framework mapping for you to sink your teeth into.

📑 Align to Mitre ATT&CK, CIS CSC, NIST CSF, and More!

While many organizations are still working out what “identity security” should look like, many of the controls related to identity already exist across a number of frameworks - NIST Cyber Security Framework, CIS CSC controls, Mitre ATT&CK, and several others. We recently published a mapping of these, which you can check out here: https://oort.io/hubfs/Oort-TheRoleofIdentityinExistingSecurityFrameworks.pdf

In this release, we’ve gone ahead and mapped our existing checks to these common frameworks. These are available to select as “topics” on the left-hand panel of the Checks page. With an ever-growing number of checks for you to choose from, it can be challenging to know what to prioritize first. By selecting those that map to frameworks related to your geography, industry, and current priorities, you can solve multiple problems all at once.

📖 All Check Settings in One Place

For any given check, you will see different sections to tune the check to your own policies and preferences. Over the past 12 months, we’ve added different settings, including check settings, allow lists, ignore lists, and notification settings. All of these settings are in slightly different places within the Check Overview pages.

In this release, all of these different settings will be combined into the top right-hand corner of the Check Overview screen. Now you can easily access different customization options for each check, ensuring we’re providing the insights that matter most to you.

Bug Fixes and Minor Improvements

• User Table Filters. Your defined filters will persist when you navigate away from the page, enabling you to easily access where you left off.