drata

What this skill does

# Drata

Drata is a security and compliance automation platform. It helps businesses continuously monitor and maintain their security posture to achieve and maintain compliance certifications like SOC 2, ISO 27001, and HIPAA. It's primarily used by security, IT, and compliance teams within organizations of various sizes.

Official docs: https://drata.com/trust-center

## Drata Overview

- **Control**
  - **Evidence**
- **Standard**
- **Framework**
- **Person**
- **Task**
- **Objective**
- **Policy**
- **Report**
- **Vendor**
- **Risk**
- **Training**
- **Asset**
- **Exception**
- **Project**
- **Milestone**
- **Application**
- **Data Asset**
- **Platform**
- **Vulnerability**
- **Test of Control**
- **Compliance Automation Run**
- **Integration**
- **User**
- **Group**
- **Repository**
- **Finding**
- **Certificate**
- **Audit**
- **Contract**
- **Product**
- **Service Account**
- **Key**
- **Saved Search**
- **Evidence Collection Schedule**
- **Evidence Request**
- **Questionnaire**
- **Attestation**
- **Access Request**
- **Change Request**
- **Security Awareness Training**
- **Background Check**
- **Code Scan**
- **Configuration**
- **Encryption**
- **Incident**
- **Penetration Test**
- **Policy Exception**
- **Privacy Assessment**
- **Risk Assessment**
- **Security Assessment**
- **Software Bill of Materials**
- **Third Party Risk Assessment**
- **Vendor Security Review**
- **Vulnerability Assessment**
- **Data Retention Policy**
- **Disaster Recovery Plan**
- **Incident Response Plan**
- **Password Policy**
- **Privacy Policy**
- **Security Policy**
- **Acceptable Use Policy**
- **Business Continuity Plan**
- **Change Management Policy**
- **Data Breach Response Plan**
- **Remote Access Policy**
- **System Security Plan**
- **Vendor Management Policy**
- **Vulnerability Management Policy**
- **Access Control Policy**
- **Data Classification Policy**
- **Physical Security Policy**
- **Secure Development Policy**
- **Cloud Security Policy**
- **Compensating Control**
- **Corrective Action Plan**
- **Security Incident**
- **Security Task**
- **Subtask**
- **Audit Log**
- **Data Encryption**
- **Data Loss Prevention**
- **Endpoint Security**
- **Intrusion Detection**
- **Multi Factor Authentication**
- **Network Security**
- **Security Information and Event Management**
- **Security Operations Center**
- **Threat Intelligence**
- **Web Application Firewall**
- **Zero Trust Architecture**
- **Breach Notification**
- **Compliance Report**
- **Data Subject Request**
- **Privacy Impact Assessment**
- **Security Awareness Training Program**
- **Security Incident Response Plan**
- **Vulnerability Disclosure Program**
- **Business Associate Agreement**
- **Confidentiality Agreement**
- **Data Processing Agreement**
- **Non Disclosure Agreement**
- **Service Level Agreement**
- **Statement of Work**
- **Terms of Service**
- **Acceptable Encryption**
- **Acceptable Authentication**
- **Acceptable Authorization**
- **Acceptable Logging**
- **Acceptable Monitoring**
- **Acceptable Patching**
- **Acceptable Scanning**
- **Acceptable Testing**
- **Acceptable Vulnerability Management**
- **Acceptable Incident Response**
- **Acceptable Data Loss Prevention**
- **Acceptable Access Control**
- **Acceptable Network Security**
- **Acceptable Physical Security**
- **Acceptable System Security**
- **Acceptable Application Security**
- **Acceptable Cloud Security**
- **Acceptable Data Security**
- **Acceptable Endpoint Security**
- **Acceptable Mobile Security**
- **Acceptable Remote Access**
- **Acceptable Wireless Security**
- **Acceptable Third Party Security**
- **Acceptable Vendor Security**
- **Acceptable Risk Management**
- **Acceptable Change Management**
- **Acceptable Configuration Management**
- **Acceptable Identity Management**
- **Acceptable Vulnerability Assessment**
- **Acceptable Penetration Testing**
- **Acceptable Security Assessment**
- **Acceptable Privacy Assessment**
- **Acceptable Business Continuity**
- **Acceptable Disaster Recovery**
- **Acceptable Incident Management**
- **Acceptable Security Awareness**
- **Acceptable Training Program**
- **Acceptable Background Check**
- **Acceptable Code Scan**
- **Acceptable Data Retention**
- **Acceptable Data Classification**
- **Acceptable Data Encryption**
- **Acceptable Data Masking**
- **Acceptable Data Minimization**
- **Acceptable Data Portability**
- **Acceptable Data Sovereignty**
- **Acceptable Data Integrity**
- **Acceptable Data Availability**
- **Acceptable Data Confidentiality**
- **Acceptable Data Privacy**
- **Acceptable Data Security Incident**
- **Acceptable Data Breach**
- **Acceptable Data Subject Request**
- **Acceptable Data Processing**
- **Acceptable Data Transfer**
- **Acceptable Data Storage**
- **Acceptable Data Disposal**
- **Acceptable Data Backup**
- **Acceptable Data Recovery**
- **Acceptable Data Archiving**
- **Acceptable Data Audit**
- **Acceptable Data Governance**
- **Acceptable Data Compliance**
- **Acceptable Data Protection**
- **Acceptable Data Security Controls**
- **Acceptable Data Security Measures**
- **Acceptable Data Security Practices**
- **Acceptable Data Security Standards**
- **Acceptable Data Security Policies**
- **Acceptable Data Security Procedures**
- **Acceptable Data Security Guidelines**
- **Acceptable Data Security Framework**
- **Acceptable Data Security Program**
- **Acceptable Data Security Management**
- **Acceptable Data Security Risk Management**
- **Acceptable Data Security Incident Response**
- **Acceptable Data Security Breach Notification**
- **Acceptable Data Security Training**
- **Acceptable Data Security Awareness**
- **Acceptable Data Security Culture**
- **Acceptable Data Security Posture**
- **Acceptable Data Security Maturity**
- **Acceptable Data Security Performance**
- **Acceptable Data Security Effectiveness**
- **Acceptable Data Security Efficiency**
- **Acceptable Data Security Value**
- **Acceptable Data Security Investment**
- **Acceptable Data Security Return on Investment**
- **Acceptable Data Security Budget**
- **Acceptable Data Security Resources**
- **Acceptable Data Security Team**
- **Acceptable Data Security Roles**
- **Acceptable Data Security Responsibilities**
- **Acceptable Data Security Accountability**
- **Acceptable Data Security Ownership**
- **Acceptable Data Security Leadership**
- **Acceptable Data Security Governance Structure**
- **Acceptable Data Security Committee**
- **Acceptable Data Security Working Group**
- **Acceptable Data Security Task Force**
- **Acceptable Data Security Project Team**
- **Acceptable Data Security Steering Committee**
- **Acceptable Data Security Advisory Board**
- **Acceptable Data Security Expert**
- **Acceptable Data Security Consultant**
- **Acceptable Data Security Auditor**
- **Acceptable Data Security Assessor**
- **Acceptable Data Security Reviewer**
- **Acceptable Data Security Validator**
- **Acceptable Data Security Certifier**
- **Acceptable Data Security Accreditation**
- **Acceptable Data Security Compliance Certification**
- **Acceptable Data Security Standard Certification**
- **Acceptable Data Security Framework Certification**
- **Acceptable Data Security Program Certification**
- **Acceptable Data Security Management Certification**
- **Acceptable Data Security Risk Management Certification**
- **Acceptable Data Security Incident Response Certification**
- **Acceptable Data Security Breach Notification Certification**
- **Acceptable Data Security Training Certification**
- **Acceptable Data Security Awareness Certification**
- **Acceptable Data Security Culture Certification**
- **Acceptable Data Security Posture Certification**
- **Acceptable Data Security Maturity Certification**
- **Acceptable Data Security Performance Certification**
- **Acceptable Data Security Effectiveness Certification**
- **Acceptable Data Security Efficiency Certification**
- **Acceptable Data Security Value Certification**
- **Acceptable Data Security Investment Certificati