Effective Modern Infrastructure Solutions

ISO 27001 requires: An annual internal audit every year and a recertification every 3 years.

This module: Automates the entire audit process so you can save time and have a hassle free internal audit every year. Deploy codified ISO 27001:2022 AWS Controls and generate compliance ready assessment reports for your AWS resources across your organisation with:

• An Audit Manager custom framework for ISO/IEC 27001:2022.

• 93 codified controls mapped to the latest 2022 version of ISO 27001 standard.

• Curated assessment reports as required by auditors.

• Evidence collected from AWS data sources like AWS Config, Security Hub.

• Support for common compliance standards and regulations such as PCI DSS, CIS benchmarks.

Supported Workloads: 30+ AWS services including IAM, VPC, EC2, RDS, S3, EKS.

ISO 27001 requires: Documented information shall be available as evidence of the implementation of the audit programme(s) - that the organisation shall plan, establish, implement and maintain.

This module: Codifies your compliance requirements by automating evidence recording. Configure customisable rules to evaluate whether your AWS resources comply with the ISO 27001:2022 standard:

• 500+ config checks and resource scans to record evidence for audit controls.

• Custom conformance pack for ISO 27001 2022.

• Pre-built config checks and remediation actions for compliance frameworks like PCI DSS, CISA, NIST and more.

Supported Workloads: AWS Account & Services.

ISO 27001 requires: Organisations to ensure that the use of cloud services is protected and securely managed, including through monitoring, configuration, and compliance checking.

This module: Automates collection and aggregation of all security findings from all cloud services in one place so you can understand the overall security posture of your AWS account or organisation.

• Centralised dashboard for security control checks and alerts into a single place and format.

• Integrate vulnerability assessment, threat detection and patch compliance findings.

• Monitor cloud environments for misconfigurations, risks, and compliance violations.

• Enable security best practices and controls.

• Simplified compliance management for global industry standards like CIS, PCI DSS, NIST etc.

Supported Workloads: AWS Account and Services