BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

3 During workload orchestration, periodically audit the asset tag of the cloud server platform

NIST platform security: roots of trust, firmware and secure enclaves IR 8320A
All changes in this version
first version loaded 3 During workload orchestration, periodically audit the asset tag of the cloud server platform

Title

During workload orchestration, periodically audit the asset tag of the cloud server platform

Control

against asset tag policy restrictions. This goal is built upon stage 0, goal 3 (auditing platform trustworthiness), but it is specifically auditing the asset tag information against the policies for asset tag to ensure that the server’s asset tagging does not violate the policies.

Achieving these goals ensures that the workloads are not launched on a server in an unsuitable boundary location. This avoids issues caused by clouds spanning different physical locations (e.g., regulations, sensitivity levels, countries or states with different data security and privacy laws).

For more information on the technical topics being addressed by these goals, see the following NIST publications:
• NIST SP 800-128, Guide for Security-Focused Configuration Management of Information Systems https://doi.org/10.6028/NIST.SP.800-128
• NIST SP 800-137, Information Security Continuous Monitoring for Federal Information Systems and Organizations https://doi.org/10.6028/NIST.SP.800-137
• NIST SP 800-147B, BIOS Protection Guidelines for Servers https://doi.org/10.6028/NIST.SP.800-147B
• Draft NIST SP 800-155, BIOS Integrity Measurement Guidelines https://csrc.nist.gov/publications/detail/sp/800-155/draft 3 Prototyping Stage 0

This section describes stage 0 of the prototype implementation (platform attestation and measured worker node launch).