drata

# Drata

Drata is a security and compliance automation platform. It helps businesses continuously monitor and maintain their security posture to achieve and maintain compliance certifications like SOC 2, ISO 27001, and HIPAA. It's primarily used by security, IT, and compliance teams within organizations of various sizes.

Official docs: https://drata.com/trust-center

## Drata Overview

- **Control**
  - **Evidence**
- **Standard**
- **Framework**
- **Person**
- **Task**
- **Objective**
- **Policy**
- **Report**
- **Vendor**
- **Risk**
- **Training**
- **Asset**
- **Exception**
- **Project**
- **Milestone**
- **Application**
- **Data Asset**
- **Platform**
- **Vulnerability**
- **Test of Control**
- **Compliance Automation Run**
- **Integration**
- **User**
- **Group**
- **Repository**
- **Finding**
- **Certificate**
- **Audit**
- **Contract**
- **Product**
- **Service Account**
- **Key**
- **Saved Search**
- **Evidence Collection Schedule**
- **Evidence Request**
- **Questionnaire**
- **Attestation**
- **Access Request**
- **Change Request**
- **Security Awareness Training**
- **Background Check**
- **Code Scan**
- **Configuration**
- **Encryption**
- **Incident**
- **Penetration Test**
- **Policy Exception**
- **Privacy Assessment**
- **Risk Assessment**
- **Security Assessment**
- **Software Bill of Materials**
- **Third Party Risk Assessment**
- **Vendor Security Review**
- **Vulnerability Assessment**
- **Data Retention Policy**
- **Disaster Recovery Plan**
- **Incident Response Plan**
- **Password Policy**
- **Privacy Policy**
- **Security Policy**
- **Acceptable Use Policy**
- **Business Continuity Plan**
- **Change Management Policy**
- **Data Breach Response Plan**
- **Remote Access Policy**
- **System Security Plan**
- **Vendor Management Policy**
- **Vulnerability Management Policy**
- **Access Control Policy**
- **Data Classification Policy**
- **Physical Security Policy**
- **Secure Development Policy**
- **Cloud Security Policy**
- **Compensating Contr...