Integrations · Incident Management Providers
PagerDuty
ProofTrail connects to PagerDuty through its API, as incident management, access review. Each sync feeds the checks below, and a failing check opens a task for its owner.
Incidents Data
Import and track security incidents to keep visibility on threats to the organization. Synced every 12 hours.
- Incident management process should be configured
- Reported incident should be closed
Access Control Data
Sync user accounts to ensure access is granted only to authorized personnel. Synced every 24 hours.
- Rules for who can access critical systems should be configured
- User access to critical system should be valid
- User should be identified
- User should have MFA enabled
- MFA should be enforced on critical system
- Periodic review of access to critical systems should be completed
- Access should be removed for offboarded user
- User should be identified (for access systems outside the audit scope)
- User access to critical system should be valid (for access systems outside the audit scope)
- User should have MFA enabled (for access systems outside the audit scope)
- MFA should be enforced on critical system (for access systems outside the audit scope)
- Access should be removed for offboarded user (for access systems outside the audit scope)