Securing your environment

Operating the SC//Reliant™ platform follows a shared responsibility model. Scale Computing secures the platform itself, and you control how your estate is configured, who can access it, and how changes are reviewed. The topics in this chapter cover the tools the platform provides to help you meet your security and compliance obligations, including PCI DSS requirements.

Topics in this section

• Internal Vulnerability Scans: scanning the devices connected to an SC//Reliant platform edge device with Greenbone's OpenVAS scanner to meet PCI DSS requirement 11.3.1, configuring the application, and viewing scan results.
• Using the audit trail: reviewing every data change made in SC//Reliant Platform Manager, either in Platform Manager or from a Security Information and Event Management (SIEM) system.

Related security topics

Other security controls are documented alongside the features they protect.

• Firewall rules and policies: controlling network traffic to and from each node.
• Web/URL filtering and the Acceptable Use Policy portal: controlling which internet destinations each network can reach.
• Using container image signing: allowing only signed container images to run on your nodes.
• Managing users and access: authentication, roles, permissions, and shell access.