Compliance testing through sandbox environments
AssigneeMicrosoft Technology Licensing, LLC
InventorsDavid Nunez Tejerina, Arthur James Schwab, III
Life of this patent
Estimating the term…
Abstract
A compliance user or auditor is enabled to inject failures into a sandbox environment, which may be similar to a production service. The sandbox environment may be monitored by the same automation that watches compliance controls in the production service. As the user injects compliance failures into the sandbox, they may detect the appropriate alerts fire in the monitoring system, thereby gaining trust that the monitoring works as it should. A rich report resulting from the test activities may allow the user or auditor to see how a failure of a compliance control leads to the expected monitoring alert.
Claims16
A method executed on a computing device to provide compliance testing through sandbox environments, the method comprising:
- monitoring a sandbox environment and a iroduction environment of a service simultaneously, wherein the sandbox environment includes one or more servers replicating roles and configurations of servers of the production environment;
- through an interactive or programmatic user experience managed by a monitoring host, enabling injection of a failure mode to a service;
- introducing the failure mode to one or more servers of a sandbox environment;
- monitoring effects of the introduced failure in the sandbox environment;
- and
- providing feedback associated with the monitored effects of the introduced failure through the interactive or programmatic user experience, wherein the feedback associated with the monitored effects of the introduced failure includes a rich content report and a risk analysis.
A computing device to provide compliance testing through sandbox environments, the computing device comprising:
- a memory device configured to store instructions;
- a processor coupled to the memory device, the processor executing a monitoring application in conjunction with the instructions stored in the memory device, wherein the monitoring application is configured to:
- monitor a sandbox environment and a production environment of a cloud service simultaneously, wherein the sandbox environment includes one or more servers replicating roles and configurations of servers of the production environment;
- through an interactive or programmatic user experience, enable injection of a failure mode to the cloud service;
- introduce the failure mode to the one or more servers of the sandbox environment;
- monitor effects of the introduced failure in the sandbox environment;
- and
- provide feedback associated with the monitored effects of the introduced failure through the interactive or programmatic user experience,
- wherein the feedback associated with the monitored effects of the introduced failure includes a rich content report and a risk analysis.
A computer-readable memory device with instructions stored thereon to provide compliance testing through sandbox environments, the instructions comprising:
- monitoring a sandbox environment and a production environment of a service simultaneously, wherein the sandbox environment includes one or more servers replicating roles and configurations of servers of the production environment;
- through an interactive or programmatic user experience managed by a monitoring host, enabling injection of a failure mode to the service;
- introducing the failure mode to one or more servers of the sandbox environment
- monitoring effects of the introduced failure in the sandbox environment;
- and
- providing feedback associated with the monitored effects of the introduced failure through the interactive or programmatic user experience, wherein the feedback associated with the monitored effects of the introduced failure includes a rich content report and a risk analysis.
Dependencies are inferred from the claim text.