Drata collects data from your cloud security posture management (CSPM) software to determine if there are active issues related to external exposure of cloud resources

This test is part of the Cloud Data Storage Restricted, Network Security Controls and Inbound Traffic Restricted Between Untrusted and Trusted Networks controls that ensures that public access is restricted to your organization’s systems.​

If Drata finds one or more issues from your CSPM, the test will fail. With a failed test, you will receive a list of issues along with associated entities and severity.

To remediate a failed test, you will need to exclude the issues or you will need to communicate to the Security team to fix and close the issues.