Drata Help Center

Tests

Troubleshooting and Information for Drata Automated Tests

163 articles

Test 121: Logs Monitored for Suspicious Activity

Test: Termination Process and Checklist

Test 143: Sensitive Data Disposal Policy

Test 141: Clean Desk Policy

Test 138: Deleting Customer Data Upon Terminated Contract

Test 136: Data Retention Policy

Test: Backups Checked for Integrity

Test 134: Failed Backups Addressed in Timely Manner

Test 133: Failed Backup Alerts Being Sent

Test 129: Capacity and Usage Monitoring

Test 127: Security Policies Cover Encryption

Test 123: Cloud Infrastructure Linked to Drata

Test 111: Logs are Retained for 365 Days

Test 110: Only Authorized Users can Access Log Sinks

Test 109: Logs are Centrally Stored

Test 108: Storage Data Versioned or Retained

Test 105: Threat Detection in Place

Test 85: Terms of Use Publicly Available

Test 84: Privacy Policy Publicly Available

Test 83: MSAs Offered to Customers

Test 66: Hard-Disk Encryption Enabled on Employee Computers

Test 61: Screensaver Lock Required on Employee Computers

Test 60: Engineering Job Description

Test 59: Job Descriptions

Test 58: New Hire Contracts

Test 50: Contractor Background Checks

Test 47: Employee Background Checks

Test 46: Performance Evaluation Process

Test 43: Security Awareness Training Completed

Test 42: Policies for Security Awareness Training

Test: Policies for a Security Team

Test 7: Only Authorized Employees Change Code

Test 6: Only Authorized Employees Access Version Control

Test 124: Root Infrastructure Account Unused

Test 107: Daily Database Backups

Test 104: Cloud Data Storage Exposure

Test 98: Employees have Unique Infrastructure Accounts

Test 97: Employees have Unique Version Control Accounts

Test 95: Infrastructure Accounts Properly Removed

Test 94: Version Control Accounts Removed Properly

Test 88: MFA on Infrastructure Console

Test 62: Password Manager Required

Test 9: Production Code Changes Restricted

Test 137: Data Classification Policy

Test 130: Load Balancer Used

Test 128: Physical Security Policy

Test 122: Web Application Firewall in Place

Test 119: Firewall Default Disallows Traffic

Test 118: Infrastructure Instance CPU Monitored

Test 117: NoSQL Cluster Storage Utilization Monitored

Test 115: Messaging Queue Message Age Monitored

Test 114: Database Read I/O Monitored

Test 113: Database Free Storage Space Monitored

Test 112: Database CPU Monitored

Test 102: Public SSH Denied

Test 89: Internal Password Policy for Employees

Test 69: Customer Data in Cloud Storage is Encrypted at Rest

Test 68: Customer Data is Encrypted at Rest

Test 67: Cryptography Policy

Test 65: Security Patches Auto-Applied

Test 64: Malware Detection Software Installed

Test: Employees Acknowledge the Data Protection Policy

Test 56: Data Protection Policy

Test 55: Employees Acknowledge the Code of Conduct

Test 54: Formal Code of Conduct

Test 51: Independent Board of Directors

Test 49: Contractors Acknowledge the Acceptable Use Policy

Test 48: Contractors Acknowledge the Code of Conduct

Test 45: Employees Acknowledge the Acceptable Use Policy

Test 44: Acceptable Use Policy

Test 39: Security Policies are Reviewed

Test: Policies are Acknowledge

Test: Has Security Policies

Test 36: Has a SDLC Policy

Test: IRP Includes Lessons Learned

Test: IRP Designates Responsible Team Members

Test 33: Incident Response Plan (IRP)

Test 32: Policies for Tracking Security Items

Test 30: Availability Zones Used

Test 28: Disaster Recovery Plan

Test 27: SLA for Security Bugs

Test 26: Security Issues are Prioritized

Test 21: Vulnerability Scanning

Test 18: Risk Assessment Policy

Test 17: Maintains Organization Chart

Test 16: Information Security Policy

Test 13: System Access Control Policy

Test: Process for Responsible Disclosure

Test 11: Contact Information Available to Customers

Test 8: Formal Code Review Process

Test 5: A Version Control System is being Used

Test 3: Least Privilege Policy for Customer Data Access

Test 4: SSL/TLS on Admin Page of Infrastructure Console

Test 2: Policies Cover Employee Confidentiality

Test 1: Policies Cover Employee Access

Test 106: Has a Backup Policy

Test 96: Employees have Unique Email Accounts

Test 87: MFA on Version Control System

Test 86: MFA on Identity Provider

Test 72: SSL/TLS Certificate has Not Expired

Test 71: SSL/TLS Configuration has No Known Issues

Test 70: SSL/TLS Enforced on Company Website

Test 63: Password Manager Records on Employee Computers

Test 209: External Exposure of Cloud Resources

Test 208: Excessive Privileges Assigned

Test 210: Encryption in Transit

Test 229: AWS IAM Unused Credentials

Test 232: AWS IAM Access Key Rotation

Test 217: AWS IAM Group-Based Access Control

Test 230: AWS IAM Principle of Least Privilege

Test 214: MFA for AWS Root Account

Test 225: Hardware MFA for AWS Root Account

Test 215: AWS IAM Password Minimum Length

Test 216: AWS IAM Password Reuse

Test 221: AWS S3 Bucket Access Logging

Test 222: AWS CloudTrail Logs Encrypted

Test 223: AWS CMK Rotation

Test 224: AWS VPC Flow Logging

Test 227: AWS Network ACLs Public Remote Server Administration Access Restricted

Test 228: AWS Security Groups Restrict Public RDP Access

Test 233: AWS VPC Default Security Groups Restrict All Traffic

Test 234: AWS S3 HTTP Requests Denied

Test 218: AWS EBS Volume Encryption

Test 219: AWS RDS Auto Minor Version Upgrade

Test 220: AWS RDS Public Access Restricted

Test 231: AWS EFS Encrypted at Rest

Test 226: AWS S3 Object-Level Logging for Read & Write Events

Test 290: AWS Database Writes I/O Monitored

Test 291: AWS Security Groups HTTP Access Restricted

Test 292: AWS EC2 Instances IMDSv1 Disabled

Test 293: AWS Classic Load Balancer Latency Monitored

Test 294: AWS Application Load Balancer Target Response Time Monitored

Test 295: AWS Classic Load Balancer Server Errors Monitored

Test 296: AWS Application Load Balancer Server Errors Monitored

Test 297: AWS Classic Load Balancer Unhealthy Hosts Monitored

Test 298: AWS Application Load Balancer Unhealthy Hosts Monitored

Test 299: AWS Application Load Balancer Redirects HTTP to HTTPS

Test 300: AWS Lambda Error Rate Monitored

Test: Critical Vulnerabilities Addressed

Test: High Vulnerabilities Addressed

Test 206: SQL Freeable Memory Monitored

Test 205: CloudTrail log file integrity validation enabled

Test 301: AWS DynamoDB Point-in-Time Recovery Enabled

Test 132: Daily backup job status monitored

October 2024 Release: AWS Drata test

Test 243: Azure Log Alert for Create Policy Assignment

Test 244: Azure Log Alert for Delete Public IP Address

Test 245: Azure Log Alert for Delete Policy Assignment

Test 246: Azure Log Alert for Create or Update Network Security Group

Test 247: Azure Log Alert for Delete Network Security Group

Test 248: Azure Log Alert for Create or Update Security Solution

Test 249: Azure Log Alert for Delete Security Solution

Test 252: Azure Log Alert for Create or Update Public IP Address rule

Test 253: Azure Storage Accounts Accessed Via Private Endpoints

Test 263: Azure Storage Accounts Secure TLS Configuration

Test 268: Azure Network Security Group SSH Public Access Restricted

Test 269: Azure App Service Web App Redirects HTTP Traffic to HTTPS

Test 256: Azure SQL Servers Auditing

Test 310: Audit Logs Enabled for EKS Clusters

February 2025 Release: AWS and Azure Drata Tests

Test 257: Azure PostgreSQL Database Server Log Checkpoints

Test 116: NoSQL Cluster CPU Load Monitored

Test 131: Autoscale Server Instances