# Hardening Standards (CIS)

The DuploCloud platform orchestrates CIS benchmark monitoring for virtual machines using Wazuh and Ossec. Wazuh provides the Security Configuration Assessment (SCA) module which offers the user the best possible experience when performing scans on hardening and configuration policies. To check the SCA report, navigate to the **SIEM** dashboard and click **Security Events**. Using the search field, enter **rule.groups: "sca"**. For more information, refer to the [Wazuh SCA](https://documentation.wazuh.com/3.12/user-manual/capabilities/sec-config-assessment/).

<figure><img src="https://2471407984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F68cb0s9ce5UIUKWPuYs8%2Fuploads%2FwD1fJIG7NDGkcaqo0695%2Fimage.png?alt=media&#x26;token=ffc59c49-0445-49b0-aff4-db54ac58509c" alt=""><figcaption><p><strong>SIEM</strong> dashboard <strong>Security Events</strong> tab in the DuploCloud Portal</p></figcaption></figure>

DuploCloud integrates with AWS Security Hub for cloud provider CIS posture and enables several other conformation packs, such as PCI and AWS Foundational Security Best Practices v1.0.0. DuploCloud also integrates with corresponding security services in GCP and Azure.

<figure><img src="https://2471407984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F68cb0s9ce5UIUKWPuYs8%2Fuploads%2FQtOFWYnl7QkYLbBe2UTX%2Fimage.png?alt=media&#x26;token=636bd027-a661-447c-a888-facec449269a" alt=""><figcaption><p>The <strong>Secuity</strong> -> <strong>Standards</strong> page in the DuploCloud Portal</p></figcaption></figure>
