Systems, methods, and media for monitoring cloud configuration settings

A system comprising:

• a memory;
• and
• a hardware processor coupled to the memory and configured to:
• receive configuration settings from a cloud service resource using an application programming interface;
• determine a resource risk score, a first tactic risk score, a first plurality of technique risk scores, a second tactic risk score, and a second plurality of technique risk scores, wherein the resource risk score is based on the first tactic risk score and the second tactic risk score, wherein the first tactic risk score is based on the first plurality of technique risk scores, wherein the second tactic risk score is based on the second plurality of technique risk scores, wherein each of the first plurality of technique risk scores is based on a corresponding subset of a set of policy scores, wherein each of the second plurality of technique risk scores is based on a corresponding subset of the set of policy scores, and wherein each of the set of policy scores is based on compliance of the configuration settings with a corresponding setting;
• and
• select a most-important technique based on the first tactic risk score, the second tactic risk score, and one of the first plurality of technique risk scores and the second plurality of technique risk scores, and remediate a configuration setting corresponding to the most-important technique.

A non-transitory computer-readable medium containing computer-executable instructions that, when executed by a processor, cause the processor to perform a method, the method comprising:

• receiving configuration settings from a cloud service resource using an application programming interface;
• determining a resource risk score, a first tactic risk score, a first plurality of technique risk scores, a second tactic risk score, and a second plurality of technique risk scores, wherein the resource risk score is based on the first tactic risk score and the second tactic risk score, wherein the first tactic risk score is based on the first plurality of technique risk scores, wherein the second tactic risk score is based on the second plurality of technique risk scores, wherein each of the first plurality of technique risk scores is based on a corresponding subset of a set of policy scores, wherein each of the second plurality of technique risk scores is based on a corresponding subset of the set of policy scores, and wherein each of the set of policy scores is based on compliance of the configuration settings with a corresponding setting;
• and
• selecting a most-important technique based on the first tactic risk score, the second tactic risk score, and one of the first plurality of technique risk scores and the second plurality of technique risk scores, and remediating a configuration setting corresponding to the most-important technique.