Security Hub CSPM Adds CRI Profile v2.2 with 404 Automated Controls!
Hello, it's Shii-chan! Today's AWS update is about security standards for the financial industry.
AWS What's New
aws.amazon.com
What was announced?
AWS What's New announced that AWS Security Hub CSPM now supports automated security checks that align with the Cyber Risk Institute (CRI) profile.
The CRI Profile is a cybersecurity framework developed by the Cyber Risk Institute, a non-profit coalition of financial institutions and trade associations. It harmonizes the cybersecurity and regulatory expectations that apply to financial services into a common set of requirements, so an organization can assess itself once and report against multiple regulations.
Why it matters
For financial institutions facing several regulations, assessment and reporting can be a heavy lift. Automating CRI profile checks helps reduce that effort.
What changes
Security Hub CSPM gets a new standard for CRI Profile v2.2.
- 404 controls support a subset of CRI Profile v2.2 requirements
- Requirements that need manual checks aren't covered by the controls
Dive Deep
- Regions: all Regions where Security Hub CSPM is available, including AWS GovCloud (US) and the China Regions
- Enabling: Security Hub central configuration is recommended, letting you enable the standard in all or only some of your organization's accounts and across all linked Regions with a single action
- Notifications: subscribe to the Security Hub SNS topic for new features and controls
- Trial: try Security Hub CSPM free for 30 days with the AWS Free Tier
Wrap-up
- Security Hub CSPM supports the CRI Profile v2.2 standard
- 404 controls automate checks for a subset of requirements (manual-check requirements aren't covered)
- Available in all supported Regions, including GovCloud and China
- Enable it in bulk with central configuration
This one is for anyone handling compliance in financial services!
