Skip to main content

Set up Swif integration with Drata

Updated over 3 weeks ago

Swif's integration with Drata allows you to streamline your security and compliance processes by combining Swif's device management capabilities with Drata's comprehensive security monitoring and compliance tools. This integration enables your organization to achieve and maintain compliance with various security standards, such as SOC 2, ISO 27001, HIPAA, and more.

Swif offers several key benefits for managing devices and ensuring compliance:

  1. Unified Device Management: Comprehensive coverage for all devices, including macOS, Windows, and Linux.

  2. Automated Enrollment: Streamlined onboarding process for new devices.

  3. Policy and Software Patch Management: Efficient management of policies and software updates.

  4. Smart Group Deployment: Automated deployment of policies and software to designated groups of devices.

  5. Real-Time Syncing: Continuous synchronization with compliance auditing platforms.

  6. AI-Powered Features: Enhanced access discovery to mitigate shadow IT risks.

Here is the list of data we are sending to Drata:

  1. Devices with assigned owners

  2. For each device owner, we will upload the following evidence to the personnel

    1. OS update (type: AUTO_UPDATES_EVIDENCE):

      1. MacOS: Software Update policy

      2. Windows: Software Update policy

      3. Linux: Software Update policy

    2. Disk Encryption (type: HARD_DRIVE_ENCRYPTION_EVIDENCE):

      1. MacOS: FileVault policy or when a device is encrypted.

      2. Windows: BitLocker policy or when a device is encrypted.

      3. Linux: When a device is encrypted, even though no encryption policy is attached, Swif will report HARD_DRIVE_ENCRYPTION_EVIDENCE to true.

    3. Screensaver policy (type: LOCK_SCREEN_EVIDENCE):

      1. MacOS: Screen saver policy

      2. Windows: Windows power policy

      3. Linux: Screen saver policy

    4. Password manager installation (type: PASSWORD_MANAGER_EVIDENCE)

    5. Antivirus installation (type: ANTIVIRUS_EVIDENCE)

    6. App blocking policy (type: APPLICATION_BLOCK_POLICY)

      1. MacOS: Application block policy

      2. Windows: Application block policy

      3. Linux: Application block policy

  3. When utilizing Swif for computer wiping, it's possible to download Media Disposal evidence. This evidence can then be conveniently uploaded to Drata for record-keeping and auditing purposes. It provides a clear and auditable trail of device disposal, which is crucial for data privacy and security.

To connect, you can follow these steps to set up the integration with Drata:

  1. Go to https://app.drata.com/settings and click your name on the bottom left and then click Settings > API keys

  2. Create a new API key

  3. Type name: For Swif,

  4. Choose Expiration: Never expires, and Custom scope

  5. Select the following permission

    1. Assets: Full access (Purpose: Sync organization-owned devices to Drata)

    2. Devices: Read and Write for Manage device documents.

    3. Evidence Library: Full access (Purpose: Sync device-related evidence to Drata)

    4. Personnel: Read details and List (Purpose: Download all active personnel (employees) from Drata to match with device owners and Upload the policy evidence by personnel ID)

    5. Workspaces: Read-only for listing workspaces (Purpose: Select which workspace to push data to)

  6. Copy the newly generated API key and paste it into Swif https://app.swif.ai/org/account > Integrations

  7. Congratulations, you are done! Swif will sync data hourly to Drata.

    1. Swif will now sync the following devices to your Drata application.

      1. The device type is Laptop or Desktop

      2. OS is macOS or Windows

      3. Has current owner (Assigned devices only)

      4. Status is ACTIVE

      5. It's Enrolled

Related Articles
Set up Swif integration with Vanta
Creating Smart Device Groups in Swif
Set up Swif integration with Thoropass
How to Customize General Compliance Requirements for Your Organization
Swif Value Props
Did this answer your question?