Data protectionPub/Sub Topic without Customer-Managed Key Encryption
Platform(s)
Compliance Frameworks
Brazilian General Data Protection (LGPD), CCM-CSA, CCPA, cis_8, coppa, CPRA, iso_27001_2022, iso_27002_2022, Mitre ATT&CK, mpa, New Zealand Information Security Manual, NIST 800-171, NIST 800-53, Orca Best Practices, PDPA, pipeda
Description
It was detected that the topic {GcpPubSubTopic} is not using CMK (Customer-Managed Key). Google Cloud Pub/Sub topics should be encrypted with Customer-Managed Keys (CMKs) in order to have full control over data encryption and decryption process. For further reading visit https://cloud.google.com/pubsub/docs/encryption#using-cmek.
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.