AWS security and compliance review
We measure your AWS security posture and governance controls against industry benchmarks to show where your compliance stands today. You then get a prioritised plan for closing the gaps.
AWS Security Hub & GuardDuty
We assess how Security Hub is configured, which standards are enabled and how findings are aggregated across accounts. For GuardDuty, we confirm threat detection is switched on in every region and account, then check who receives the findings and whether anyone acts on them.
CIS & NIST benchmark compliance
Your environment is benchmarked against the CIS AWS Foundations Benchmark and the relevant NIST 800-53 controls. Each finding maps to a specific control and comes with a severity rating and a remediation step, and the report shows where you meet each standard and where you fall short.
AWS Config & governance
We evaluate AWS Config rules, conformance packs and compliance state across your accounts and identify missing guardrails, such as rules to detect public S3 buckets or unencrypted resources. Where we can, we recommend preventative controls so that fewer problems need fixing after the event.
CloudTrail & logging
In every account and region we check CloudTrail for multi-region trails and log file validation, and review the security of the S3 bucket that holds the logs. We look at the CloudWatch Logs integration too and report any API activity or security events that aren't being captured or kept.
Alerting & incident response
We follow your alerting pipeline from CloudWatch Alarms and EventBridge rules through to SNS notifications and your incident workflow. Root account usage, unauthorised API calls and configuration changes should all raise a prompt alert with the right people, and we check that they do.
Other AWS reviews
- Identity & access
- Network & infrastructure
- Compute & workloads
- Architecture & operations
- Cost optimisation
Also on Azure? See our Azure security and compliance review.