CISA Publishes Guide on Free Cloud Environment Security Tools

The Cybersecurity and Infrastructure Security Agency has provided businesses a fact sheet that identifies tools they can use to protect critical assets and data as they migrate to the cloud.

The Free Tools for Cloud Environments fact sheet also includes resources to guide network defenders and analysts in identifying, mitigating and detecting vulnerabilities and anomalies in a cloud or hybrid environment, CISA said.

Five tools were identified in the document, namely the CISA-developed Cyber Security Evaluation Tool, SCuBAGear M365 Secure Configuration Baseline Assessment Tool and Untitled Goose Tool; the Decider tool fom Mitre; and Memory Forensic on Cloud from the Japan Computer Emergency Response Team Coordination Center.

CISA encouraged businesses to use the tools to complement built-in security features from cloud service platforms and cloud service providers and fill security gaps.

The agency said consulting the fact sheet will help reduce the likelihood of a damaging cyber incident and strengthen cyber resilience.