How to Custom Create Compliance Policies in Saner CVEM

Overview
Some organizations may not need to follow specific compliance benchmarks but still require strong security controls. Saner CVEM provides general security templates that allow you to custom-create security policies tailored to your organization’s needs.

Prerequisites

Before beginning, ensure the following:

• You have access to Saner CVEM with administrative privileges.

• You are familiar with compliance standards such as NIST, PCI, or HIPAA.

Steps to Custom Create a Security Policy

Step 1: Access Compliance Management Dashboard

• Log in to Saner CVEM.

• Navigate to the Compliance Management dashboard.

• Click on Benchmarks.

Step 2: Create a New Benchmark

• Click on Create New Benchmark.

Step 3: Select Security Templates

• You will see a list of security policies, including:

  • General Compliance

  • NIST

  • PCI

  • HIPAA

• Select the desired compliance standard.

• Choose the templates you want to include by choosing the option

• You need to select the OS on which this template needs to selected and then click on verify

Step 4: Edit Individual Templates

• You can edit each template individually.

• Choose the categories and add desired values.

• Read the template description to understand the purpose and impact.

Step 5: Navigate Categories

• Click Next to move to the next category.

• Repeat the editing process for all selected categories.

Step 6: Save the Custom Policy

• After completing all edits, click Save.

• Select the group 

• Provide the name and then click on save, once saved the policy will be created and the assets which belongs to the group selected will get these policies.

Note:
Your custom security policy is now created and can be applied to the required assets, ensuring compliance with organizational security requirements without strictly following predefined benchmarks.