MEDIUMCIS 3.6

Ensure Block Volumes use customer-managed encryption

Block volumes should be encrypted with Vault-managed keys for sensitive data.

Security Impact

Oracle-managed encryption lacks key access control and rotation management.

How to Remediate

Configure block volumes to use Vault master encryption key.

Affected Resources

OCI::Core::VolumeOCI::Kms::Key

Compliance Frameworks

CIS OCI v1.2.0SOC 2PCI-DSSHIPAA

How TigerGate Helps

TigerGate continuously monitors your Oracle Cloud environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

  • Continuous Scanning

    Automatically scans all Oracle Cloud Block Volume resources across your Oracle Cloud tenancies every hour

  • Instant Alerts

    Get notified via Slack, email, or webhooks when this misconfiguration is detected

  • One-Click Remediation

    Fix this issue directly from the TigerGate dashboard with our guided remediation

  • Compliance Evidence

    Automatically collect audit evidence for CIS OCI v1.2.0, SOC 2, PCI-DSS compliance

  • Drift Detection

    Get alerted if this configuration drifts back to an insecure state after remediation

Check Details

Check ID
oracle-storage-7
Service
Oracle Cloud Block Volume
Category
Encryption
Severity
MEDIUM
CIS Benchmark
3.6

Automate This Check

TigerGate automatically scans your Oracle Cloud environment for this and 50+ other security checks.

Start Free Trial

Related Oracle Cloud Block Volume Checks

View all checks
oracle-storage-1critical

Ensure Object Storage buckets are not public

oracle-storage-2high

Ensure Object Storage buckets have encryption enabled

oracle-storage-3medium

Ensure Object Storage has versioning enabled

oracle-storage-4low

Ensure Object Storage has lifecycle policies

oracle-storage-5medium

Ensure Object Storage audit events are enabled