> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/use-an-assessment-profile-to-run-compliance-checks-on-your-assets/configuring-assessments-for-custom-compliance-standards-based-on-custom-cloud-security-rules.md).
# Configuring assessments for custom compliance standards based on custom cloud security rules
When using custom compliance standards based on custom cloud security rules make sure to create a cloud security policy including your custom rules to ensure accurate assessment results are generated
While a majority of these guidelines reflect standard practices applicable to other use cases, when using custom compliance standards based on custom cloud security rules make sure to create a cloud security policy including your custom rules to ensure accurate assessment results are generated.
The following table describes the components that are necessary to configure custom compliance standards based on custom rules to ensure that the standard will be assessed against a configured scope of assets:
| **Component** | **Requirements** | **Documentation link** |
| -------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Custom compliance standard** | Create a custom compliance standard as usual. | [Create a custom standard](/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/use-a-built-in-or-custom-standard.md#create-a-custom-standard) |
| **Custom compliance controls** | Create custom compliance controls and populate the custom standard with the relevant custom controls. | [Create a custom control](/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/use-a-built-in-or-custom-control.md#create-a-custom-control-to-use-in-a-custom-standard) |
| **Custom cloud security rules** | Create custom cloud security rules, which implement the detection capabilities necessary to determine the status of the corresponding controls. When creating the rules, make sure to associate them with the relevant custom compliance controls. | [Create custom cloud security rules](/cortex-cloud-posture-management/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules.md) |
| **Asset group** | Create an asset group which includes the appropriate scope of assets based on the intended purpose of the custom compliance standard. | [Create an asset group](/cortex-cloud-posture-management/cloud-inventory-and-environment/asset-groups.md) |
| **Assessment profile** | Create an assessment profile for the custom standard using the asset group created above. Configure reporting as desired. | [Create an assessment profile](/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/use-an-assessment-profile-to-run-compliance-checks-on-your-assets.md) |
| **Custom cloud security policy** | To guarantee accurate assessment results, you must create a custom cloud security policy that incorporates all rules from the custom compliance standard. This is required because custom cloud security rules do not automatically generate findings. When creating the policy, make sure that the policy includes:
- The custom compliance standard as the rule scope.
- The asset group used for the assessment profile as the asset scope.
| See below |
### Create a cloud security policy with the correct rules and scope
When creating a cloud security policy, make sure it fulfills the requirements listed above.
1. Navigate to **Posture Management** → **Rules & Policies** → **Policies** → **Cloud Security**.
2. Click **Create Policy**.
3. On the **Details** page, provide Policy Name, Description, and Labels (optional).
4. Click **Next**.
5. (Important) On the **Rules** page, select **All Matching Filter Criteria**. Next, select “Compliance Standards”, “Contains”, and then select your custom compliance standard. This ensures that all the cloud security rules from your custom compliance standard are attached to the cloud security policy.\
6. Click **Next**.
7. (Important) On the **Scope** page, select **From Asset Groups** and then select the asset group used for the assessment profile:\
8. Click **Done** to save the policy.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/use-an-assessment-profile-to-run-compliance-checks-on-your-assets/configuring-assessments-for-custom-compliance-standards-based-on-custom-cloud-security-rules.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.