BloodHound Enterprise Compliance Framework

BloodHound Enterprise helps organizations meet their compliance requirements by providing visibility into identity attack paths and enabling organizations to remediate them. BloodHound Enterprise can help satisfy controls across multiple compliance frameworks, including:

• NIST CSF v1.1
• NIST CSF v2
• NIST SP 800-171
• NIST SP 800-53 Rev. 8

​

How BloodHound Enterprise Helps with Compliance

BloodHound Enterprise helps organizations meet their compliance requirements in several ways:

1. Asset Management: BloodHound Enterprise provides a comprehensive inventory of Active Directory and Azure assets through automated scans of the environment.

2. Risk Assessment: BloodHound Enterprise’s attack path analysis and risk scoring help organizations understand and quantify their cybersecurity risk.

3. Configuration Management: BloodHound Enterprise helps establish access and identity baselines and detects deviations from those baselines.

4. Monitoring: BloodHound Enterprise provides routine and on-demand scans to continuously monitor for identity attack paths.

5. Incident Response: BloodHound Enterprise’s attack path analysis helps organizations understand and respond to identity-based threats.

For more information about how BloodHound Enterprise maps to specific compliance controls, see the Compliance Resources page.