Cloud Security Posture Management (CSPM) is a security solution category that can identify and help remediate cloud misconfigurations. Gartner introduced the CSPM category, and officially describes it as a solution that automates security and provides compliance assurance in the cloud.
CSPM starts from a framework based on regulatory requirements, industry benchmarks and company policies, and continuously manages cloud risk by preventing, detecting, responding and predicting cloud infrastructure risks.
At the heart of CSPM technology is active and passive detection and assessment of risk in cloud service configurations, for example network and storage configuration, and security settings, for example encryption and assigned permissions. In many cases, if the configuration is not compliant, the CSPM product can take automated corrective action to reconcile it with compliance and security requirements.
This is part of our series of articles about Cloud Native Application Protection Platforms (CNAPP).