What can I evaluate?
Effective 15 Dec 2025, IBM Cloud® Security and Compliance Center is deprecated. Any existing service instances are non-functional. Start your transition now to Security and Compliance Center Workload Protection, which is readily available and offers advanced cloud security posture management (CSPM). For more information, see Transitioning to Security and Compliance Center Workload Protection.
With IBM Cloud® Security and Compliance Center, you can evaluate the resources that run on IBM Cloud and other cloud providers for compliance. The environments that can be evaluated differ depending on how the configuration information is obtained.
Environments that can be evaluated
With Security and Compliance Center you can evaluate IBM Cloud. To start evaluating resources in other environments such as a Amazon Web Services and Microsoft Azure, you must connect an instance of Security and Compliance Center Workload Protection through the integrations panel. For help getting started with multicloud flows, see Available integrations.
IBM Cloud components that can be evaluated
You can evaluate your organization’s current security and compliance posture by validating the configuration of your resources in the following components.
- App Configuration
- App ID*
- Cloud Internet Services (CIS)
- IBM Cloud Platform
- Billing
- Catalog Management
- IAM
- Cloud Shell
- Cloud Object Storage
- Code Engine
- Container Registry
- Direct Link
- Event Notifications
- Event Streams
- Hyper Protect Crypto Services
- Hyper Protect DBaaS for MongoDB
- Hyper Protect DBaaS for PostgreSQL
- Kubernetes Service
- Red Hat® OpenShift® on IBM Cloud®
- Satellite
- Schematics
- Secrets Manager
- Toolchain
- Transit Gateway
- Virtual Private Cloud (VPC)