Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide

The Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide (V2 R3) has 31 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

31STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R3

CurrentPublished Wed Apr 01 2026

Prisma Cloud Compute must not write sensitive data to event logs.

Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide

Assessment Title

Rule Text

Prisma Cloud Compute must not write sensitive data to event logs.

Description

Discussion Text

The determination of what is sensitive data varies from organization to organization. The organization must ensure the recipients for the event log information have a need to know and the log is sanitized based on the audience.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-253541

Rule

SV-253541r961167_rule

Severity

medium

Rule Version

CNTR-PC-000880

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Navigate to Prisma Cloud Compute Console's >> Manage >> System >> General tab. 

Inspect the Log Scrubbing section. If "Automatically scrub secrets from runtime events" is "off", this is a finding.

Implementation Procedure

Fix Text

Navigate to Prisma Cloud Compute Console's >> Manage >> System >> General tab. 

In the Log Scrubbing section, set "Automatically scrub secrets from runtime events" to "on" and click "Save".

STIG check 20 of 31 in the Palo Alto Networks Prisma Cloud Compute STIG checklist

← Previous · V-253540Prisma Cloud Compute must prevent unauthorized and unintended information transfer.Next · V-253542 →The node that runs Prisma Cloud Compute containers must have sufficient disk space to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.