STIGQter: STIG Summary: Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 01 Apr 2026:

Prisma Cloud Compute Collections must be used to partition views and enforce organizational-defined need-to-know access.

DISA Rule

SV-253525r1137641_rule

Vulnerability Number

V-253525

Group Title

SRG-APP-000038-CTR-000105

Rule Version

CNTR-PC-000130

Severity

CAT II

CCI(s)

• CCI-001368 - Enforce approved authorizations for controlling the flow of information within the system based on organization-defined information flow control policies.

Weight

10

Fix Recommendation

Navigate to Prisma Cloud Compute Console's >> Manage >> Collections and Tags >> Collections tab.

Create a collection:
- Click "Add Collection".
- Enter a name and description and then specify a filter to target specific resources.
- Click "Save".

Check Contents

Navigate to Prisma Cloud Compute Console's >> Manage >> Collections and Tags >> Collections tab.

Review the Collections according to organizational policy.

If no organizational-specific Collections are defined, this is a finding.

Vulnerability Number

V-253525

Documentable

False

Rule Version

CNTR-PC-000130

Severity Override Guidance

Navigate to Prisma Cloud Compute Console's >> Manage >> Collections and Tags >> Collections tab.

Review the Collections according to organizational policy.

If no organizational-specific Collections are defined, this is a finding.

Check Content Reference

M

Target Key

5473