Skip to content

Glossary: Vulnerability, Asset and Change Management

CSPM (cloud security posture management)

Also written: CSPM, cloud security posture management

Tools that connect to cloud accounts with read-only access and check every setting against one rule set, continuously, raising a finding when, say, a bucket goes public. Examples are Microsoft Defender for Cloud, AWS Security Hub and Wiz.

Where the book teaches it

Related terms

checkovInfrastructure as codeDriftMisconfiguration