AWS looks to be aligning its cloud security to CyberSecurity Framework Profiles (CSF), following a October 2021 update of its CSF policy.

← Back to Blog

AWS looks to be aligning its cloud security to CyberSecurity Framework Profiles (CSF), following a October 2021 update of its CSF policy. Providing a level of global flexibility between alternate frameworks such as ISO/ IEC 27001, NIST SP 800 – 53 and 171 and FedRAMP. CSF profiles are widely adopted by numerous industries including Financial Services and have been recognised by a number of countries as an accepted cybersecurity framework. For organisations wanting to manage cybersecurity risk the appropriate CSF profiles provide flexibility and can be extended to include Governance, Strategy, Business Environment and Risk Management. Supporting the integration of cybersecurity into the business and board room.

For AWS aligning cybersecurity with CSF profiles maybe aimed at the market. Providing a global standard for cybersecurity risk management implementation, oversight and assurance. CSF profiles deliver a more cost effective cybersecurity framework for Federal Agencies, contractors and subcontractors who will have to adopt cloud as an appropriate tool for controls inheritance through the shared responsibility model. CSF profiles simply provide a common international standard facilitating a more efficient approach for cyber security and cost reduction.

When we published the Augusta Plan 1.0 in June 2021 (https://lnkd.in/dKAHRxMe), we presented to a number of Federal Agencies and Commissions and set out a strategy for the oversight and assurance of cybersecurity and controls inheritance. Using the shared responsibility model as the mechanism for the cost effective implementation of cybersecurity for small business.

We have subsequently updated the Augusta plan (2.0) to meet the regulatory requirement FISMA and OMB A – 130. Utilizing CSF profiles (specifically the use of the manufacturing CSF profile) aligned to mission and business objectives, to provide a tailored security profile. The use of CSF profiles with AICPA Trust Service Criteria (TSC) provides the mechanism for greater international oversight and assurance through the international CPA network and SOC reporting.

Ted Dziekanowski Brian McCarthy Jason Spezzano

#ransomware‚ #fisma‚ #ofac‚ #theaugustagroup‚ #theaugustaplan‚ #cybersecurity‚ #supplychainriskmanagement‚ #cyberriskmanagement‚ #compliance‚ #regulatorycompliance‚ #regulatoryoversight‚ #esg‚ #scrm‚ #cscrm‚ #fca‚ #cybercompliance‚ #cyberregulation‚ #cybergovernance‚ #falseclaimsact #afcea #afceacyber #aws

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6861213645884411904