Overview

Scrut integrates with MongoDB (Atlas or self-managed, as applicable) to capture database access, roles, and security configuration. Use it to validate least-privilege access, document audit/security settings, and support data security evidence.

Why Connect

• Track database roles, users, and privileged access.
• Support evidence for least-privilege and audit settings.
• Improve governance over sensitive data stores.

Supported Automated Tests

Scrut provides pre-built automated tests for MongoDB. Here are a few examples of Scrut’s MongoDB tests:

• Access reviews completed for all in-scope applications
• MongoDB accounts associated with users
• MongoDB accounts deprovisioned when employees leave

Supported Automated Evidence

Scrut automates the collection of some evidences for MongoDB. Here are a few examples of Scrut’s MongoDB-driven evidences that can be collected:

• Automatic Capacity and Performance Monitoring Configuration
• Capacity Monitoring Reports & Management Review
• Enabled Multi-Factor Authentication
• Encryption for Data at Rest or Transit
• Multi-AZ implementation for database
• Offboarding - Logical Access & Physical Access Revocation
• Reports of User Access Reviews
• User Access Approval list to Application, Infrastructure and Service