A SaaS service that shows security and compliance standing for AWS, Azure and Nutanix using more than 800 audit checks. It should not be confused with the Security Dashboard in Prism Central.
Also called Security Central.
Read more: Nutanix docs
In the Ultra Transcenders books
Each book explains NCM Security Central in context, with comparison tables and the common traps.
Terms in this definition
- SaaS
A cloud model in which you consume a finished application that the provider operates, Microsoft 365 for instance. Nearly everything is the provider's job; you look after your data, users and devices.
- AMPRS
An acronym for availability, manageability, performance, recoverability and security: the five design qualities used to sort non-functional requirements and to weigh up trade-offs between design decisions.
- AWS
Short for Amazon Web Services, Amazon's public cloud. Linking AWS accounts to Microsoft Defender for Cloud brings them under its recommendations and protections.
- Audit
Policy effect that lets a request proceed but flags the resource as non-compliant and logs a warning to the activity log. Microsoft suggests beginning there and later moving to something enforcing, like Deny.
- Security Dashboard
A view in Prism Central showing security metrics and compliance for clusters. Some controls can be set from its hardening widget; others are only reported there.
- Prism Central
A standalone instance, made up of either one VM or three in scale-out form, for monitoring and managing many clusters centrally.
Related terms
- Amazon S3
Buckets in this Amazon object store receive IPFIX logs from the Security Central VM. Public ones must also be reachable by any AWS-hosted VM being moved with Nutanix Move.
- CISA
One of the sources of security best practice, with NIST and MITRE, used as a benchmark by the Security Risk view in Security Central.
- CSF
A security framework, listed as NIST CSF among the compliance templates built into Security Central.
- HIPAA
Protects health information under US law. The compliance view in Security Central includes it among the standards it covers.
- IPFIX
A standard for exporting network flows. Logs in this form reach NCM Security Central from Nutanix clusters via a dedicated VM, and they hold only metadata, never customer data.
- MITRE
NCM Security Central's Security Risk view scores ransomware readiness against guidance from this source, as well as CISA and NIST.
- NIST
A US institute that sets standards. Its guidance underpins ransomware posture checks in NCM Security Central, which also reports on compliance with NIST 800-171, NIST 800-53 and NIST CSF.
- PCI DSS
A security standard for the card-payment industry, aimed at keeping cardholder data safe. Security Central's compliance view covers it.