Assessment oci Networking

[williamblanco]

Hello everyone.
Does anyone have knowledge or instructions for conducting a security assessment in the OCI cloud? What is the most recommended framework and tool for performing the activity? Or what methodology do you recommend for an activity of this type?

[nkeaton]

Are you talking about using tools outside of Oracle?  I would think that Observability and Management within OCI  might give you what you want for the audit logs.  

[akkem]

I haven’t had the opportunity to work directly on OCI, but similar standards and frameworks use to assess other cloud environments, which are largely consistent across platforms.
- CIS OCI benchmarks - https://www.cisecurity.org/benchmark/oracle_cloud
- NIST CSF framework
- ISO/IEC 27001 or 27017
- MITRE ATT&CK scenarios to simulate threats.