Use a built-in or custom standard

Use built-in standards or create and edit custom standards for your organization.

You can use a built-in industry standard or create a custom standard. A custom standard can be either a copy of a built-in standard or a custom standard created from scratch.

Use a built-in standard

Cortex provides built-in industry approved regulatory compliance standards, for example GDPR. These standards cannot be edited or deleted, you can duplicate them to create a custom standard.

Clone a built-in standard

To reuse and modify a built-in standard, clone the built-in industry standard:

1. In the Standards catalog, right-click on the built-in standard you want to edit or select from the standard's side pane.
2. Select Save as new.
3. Define compliance standard metadata, including:

   1. Name: By default, the original built-in standard name is used with “_copy“ is appended. You can update it if needed.
   2. Description: You can update the description if needed.
   3. Select Controls: You can select or deselect controls as needed.
4. Click Create.

Create a custom standard

You can create a custom compliance standard that is tailored to your own business needs and organizational policies.

To organize controls within a custom compliance standard, you establish categories and optional sub-categories. Every control is defined as part of a specific standard and assigned to a single category within it. Sub-categories offer an additional layer of organizational structure.

1. In the Standards catalog, click Create Standard.
2. Define compliance standard metadata, including:

   1. Name
   2. Description (optional)
   3. Labels (optional)
3. Click Next.
4. Under Select Controls, you select the controls that you would like to add to the standard.
5. Click Create.

Manage existing custom standards

Custom compliance standards can be managed from Posture Management → Compliance → Standards Catalog. Right click on a standard or select from the standard's side pane to edit or delete it. You can edit all parameters of the standard and update the list of controls assigned to it.