Auto Checks explained
The Auto Checks feature automatically verifies your cloud configurations against compliance requirements (e.g. ISO 27001:2022). It helps you:
- Continuously monitor cloud environments for compliance-relevant misconfigurations
- Link technical evidence (Auto Checks) directly to controls and implementation steps
- Identify and resolve misconfigurations using detailed remediation guidance
What Do Auto Checks Cover?
Auto Checks currently support the following integrations:
- AWS (available now)
- GCP (coming soon)
- Azure (coming soon)
Important: Auto Checks only run for services that are in use within your connected environment. If a service is not in use, the corresponding Auto Checks will not run and be marked as "Not Applicable."
How do I enable Auto Checks for my Environment?
If your AWS integration is already connected, no additional setup is required — Auto Checks will automatically run in the background.
In case you don´t have your AWS Integration please navigate to the Integration Page and configure your AWS Integration.
If you're setting up Auto Checks for the first time:
- Ensure your AWS integration is set up.
- Trigger a discovery run to link Auto Checks to relevant controls. This may take a few minutes.
To disable Auto Checks:
- Navigate to the Integrations page in Kertos.
- Select the AWS integration and click Setup.
- Click Reconfigure.
- At the top of the setup page, toggle Auto Checks off.
How do I see the results of the Auto Checks Feature?
Navigate to a Controls Page that supports Auto Checks, such as:
- A.8.2
- A.8.15
- A.8.16
- A.8.5
- ....
On the control overview Page you will see that the Auto Checks are listed twice. First on the respective Implementation Step, which it also checks off once it state is passing. Secondly on the Evidence Section, where you see all the linked Auto Checks for a given Control.
The Auto Check cards show:
- A clear title
- Current status (Passed / Failed / Not Applicable)
- The associated Integration (e.g. AWS, GCP, Azure)
- Time Stamp of last time run
If you click on the Auto Check Card (either in the section "Implementation progress" or "Evidence") you will see that a Modal will open up.
Each Auto Check includes:
- A clear title
- Current status (Passed / Failed / Not Applicable)
- A detailed description of the finding
- Remediation guidance
- Potentially a Command Line Input
How do I manage Auto Checks?
You can manually unlink or relink Auto Checks from the Evidence section or Implementation Steps:
- To unlink: Click the “-” icon left of the Auto Check card.
- To relink: Click the "+Suggestions" button. If all suggestions are already linked, the button will be grayed out with the tooltip: “No suggestions available for this control.”
How does the Auto Check Status Impacts Controls Status?
- When a check passes, the corresponding implementation step is marked complete.
- When all implementation steps are complete, the control status is updated to Implemented.
- If a previously passing check later fails:
- The linked implementation step will be unchecked
- The control remains in Implemented status (it will not auto-revert)