Professional Services Prisma Cloud Code Security +

Key Deliverables

1. Planning - include review of the project requirements (new deployment), discuss milestone timelines, identify the Customer’s project team members and follow-up action items
2. Discover - Netcontroll will capture deployment scenario(s) to be designed and Palo Alto Networks will provide a Technical Requirement Document Provide system and integration requirements of Prisma Cloud Code Security Discuss the access requirements to Prisma Cloud Code Security Integration Discuss the code repository, CI/CD pipeline and IDE requirements Prepare technical detail gathering sheet for implementation Document and review technical details with the customer
3. Setup - Netcontroll Professional Services, with the Customer’s assistance, will perform an initial remote Prisma Cloud Code Security setup. The configuration parameters are as follows: Enable Code Security on Prisma Cloud Setup administrative access Generate access key Validate IAM permissions for Code Security Connect and configure up to two (2) repositories from the following: GitHub GitHub Server Bitbucket Bitbucket Server GitLab Self-Managed GitLab Azure Repos Connect and configure one (1) CI/CD pipeline from the following: Terraform Cloud (Sentinel) Terraform Enterprise (Sentinel) GitHub Actions Jenkins CircleCI AWS Code Build Checkov Install Checkov CLI on Customer workstation or IDE tools (VScode or IntelliJ)
4. Integration - Netcontroll Professional Services, with the Customer’s assistance, will perform an initial remote Prisma Cloud Code Security alert integration. The integration parameters are as follows: Enable Prisma Cloud Code Security alert notifications to one (1) of the following: Microsoft Teams Slack Splunk Webhooks
5. Configuration - Netcontroll will, with the Customer’s assistance, perform an initial remote Prisma Cloud configuration. The configuration parameters are as follows: Enable or tune the scan configuration Build up to two (2) custom policies for build-time checks

Test policies using Checkov CLI on customer workstation Assist in remediation or suppression of IaC vulnerabilities and misconfigurations, up to four (4) items Assist ad ensure drift detection is working as intended 6. Knowledge Transfer - Netcontroll consultant will provide knowledge transfer upon completion of all the tasks A single session of up to two (2) hours for up to eight (8) participants. Review As-built environment Review the actions and decisions that were taken during the validation phase and work with proper resources for management knowledge transfer. Review the actions and remediations taken during the different phases of the project to go over an operations knowledge transfer.