What can I evaluate?
As of 17 July 2025, you cannot create new instances in this version of this product. All of the functionality is now available in the updated experience of Security and Compliance Center Workload Protection. For more information, see the transition documentation.
With IBM Cloud® Security and Compliance Center, you can evaluate the resources that run on IBM Cloud and other cloud providers for compliance. The environments that can be evaluated differ depending on how the configuration information is obtained.
Environments that can be evaluated
With Security and Compliance Center you can evaluate IBM Cloud. To start evaluating resources in other environments such as a Amazon Web Services and Microsoft Azure, you must connect an instance of Security and Compliance Center Workload Protection through the integrations panel. For help getting started with multicloud flows, see Available integrations.
IBM Cloud components that can be evaluated
You can evaluate your organization’s current security and compliance posture by validating the configuration of your resources in the following components.
- App Configuration
- App ID*
- Cloud Internet Services (CIS)
- IBM Cloud Platform
- Billing
- Catalog Management
- IAM
- Cloud Shell
- Cloud Object Storage
- Code Engine
- Container Registry
- Direct Link
- Event Notifications
- Event Streams
- Hyper Protect Crypto Services
- Hyper Protect DBaaS for MongoDB
- Hyper Protect DBaaS for PostgreSQL
- Kubernetes Service
- Red Hat® OpenShift® on IBM Cloud®
- Satellite
- Schematics
- Secrets Manager
- Toolchain
- Transit Gateway
- Virtual Private Cloud (VPC)