AUTOMATED WORKFLOW MANAGEMENT AND MONITORING OF DATACENTER IT SECURITY COMPLIANCE

1 . An information handling system comprising:

at least one processor;

a non-transitory memory coupled to the at least one processor; and

an information handling resource coupled to the at least one processor and having an encryption key associated therewith;

wherein the information handling system is configured to:

receive a compliance template that includes security attributes of the information handling resource, the security attributes including information regarding the encryption key;

based on the compliance template and a compliance standard, determine a set of compliance tests for the information handling resource;

execute the set of compliance tests; and

in response to a failure of at least one test of the set of compliance tests, provide an indication of the failure.

2 . The information handling system of claim 1 , wherein in response to the failure of the at least one test, the information handling system is further configured to update a software and/or a firmware of the information handling resource.

3 . The information handling system of claim 1 , wherein in response to the failure of the at least one test, the information handling system is further configured to update the encryption key of the information handling resource.

4 . The information handling system of claim 1 , wherein the information handling system is a host information handling system that further comprises a management controller, the management controller being configured to provide out-of-band management of the information handling system.

5 . The information handling system of claim 1 , further comprising a Trusted Platform Module, wherein the Trusted Platform Module is configured to facilitate execution of the set of compliance tests.

6 . The information handling system of claim 1 , wherein the information handling system is a management controller configured to provide out-of-band management of a host information handling system, and wherein the host information handling system comprises the information handling resource.

7 . The information handling system of claim 6 , wherein the management controller is a chassis management controller configured to provide out-of-band management of a plurality of host information handling systems.

8 . The information handling system of claim 1 , wherein the set of compliance tests includes at least one test configured to verify at least one of a firmware version, a driver version, or an operating system patch level.

9 . A method comprising:

at an information handling system that includes an information handling resource, receiving a compliance template that includes security attributes of the information handling resource;

based on the compliance template and a compliance standard, the information handling system determining a set of compliance tests for the information handling resource;

the information handling system executing the set of compliance tests; and

in response to a failure of at least one test of the set of compliance tests, the information handling system providing an indication of the failure.

10 . The method of claim 9 , wherein the compliance template is further based on a mapping between inventory details of a baseline configuration of the information handling system and security functions of the information handling system, and wherein the compliance template facilitates execution of the set of compliance tests.

11 . The method of claim 9 , further comprising:

continuously monitoring the information handling system for a hardware and/or software change.

12 . The method of claim 9 , further comprising updating the compliance template in response to a change in the compliance standard.

13 . The method of claim 9 , wherein the set of compliance tests includes at least one test configured to verify a version of an application program stored by the information handling system.

14 . An article of manufacture including a non-transitory, computer-readable medium having instructions store thereon, the instructions being executable by at least one processor of an information handling system for:

receiving a compliance template that includes security attributes of an information handling resource of the information handling system;

based on the compliance template and a compliance standard, determining a set of compliance tests for the information handling resource;

executing the set of compliance tests; and

in response to a failure of at least one test of the set of compliance tests, the information handling system providing an indication of the failure.

15 . The article of claim 14 , wherein the compliance template includes information regarding an encryption key associated with the information handling resource.

16 . The article of claim 14 , wherein the instructions are further executable for, in response to the failure of at least one test, updating a software and/or a firmware associated with the information handling resource.

17 . The article of claim 14 , wherein the instructions are further executable for, in response to the failure of at least one test, updating an encryption key associated with the information handling resource.

18 . The article of claim 14 , wherein the set of compliance tests includes at least one test configured to verify at least one of a firmware version, a driver version, or an operating system patch level.

19 . The article of claim 14 , wherein the compliance template is created manually.

20 . The article of claim 14 , wherein the security attributes include security functions implemented at the information handling system and test strategies available at the information handling system.