ISMS-P-Intelligence-Dashboard(Container)

ISMS-P Intelligence Dashboard automates the technical compliance assessment required for Korea's ISMS-P (Information Security Management System - Personal Information) certification. Built on an advanced K-ISMS compliance framework optimized for AWS, it evaluates hundreds of security controls across your AWS accounts daily and presents actionable compliance insights through an integrated analytics pipeline. The solution deploys as a single CloudFormation stack with a fully serverless architecture. An EventBridge schedule triggers Step Functions daily at 02:00 KST, orchestrating parallel scans across all configured target accounts via high-performance Lambda Container Images. Scan results in OCSF format are stored in a centralized S3 Data Lake, transformed to Parquet via Glue ETL, and made queryable through pre-configured Athena views. An optional QuickSight dashboard provides at-a-glance compliance metrics including compliance rate, critical/high severity findings, category breakdowns, and 30-day trend analysis. Key technical capabilities: - Advanced K-ISMS Compliance Framework: A comprehensive library of automated checks mapped to ISMS-P technical controls covering access control, network security, encryption, logging, and more. - Cross-Account Scanning: Scan multiple AWS accounts from a central hub using secure IAM AssumeRole. Each account runs independently with partial failure tolerance - one account's issue does not affect the execution of others. - S3 Data Lake Architecture: All scan results and security findings are stored in a centralized S3 bucket with date-partitioned paths for efficient querying, long-term retention, and audit integrity. - Athena Analytics: Pre-built views for latest findings, KPI aggregation, severity distribution, category breakdown, and compliance trend analysis. Query your compliance data directly with standard SQL. - QuickSight Dashboard (Optional): One-click activation via CloudFormation parameter. Overview dashboard with KPI cards, severity bar charts, category donut charts, and non-compliant items table. SPICE-powered for sub-second response times with daily refresh. - Serverless & Cost-Efficient: No servers to manage. Lambda Container Images handle the scanning engine execution within the 15-minute limit. Step Functions orchestrate parallel workloads. Pay only for what you use. The dashboard is designed for security teams, compliance officers, and IT auditors preparing for or maintaining ISMS-P certification. It eliminates manual evidence collection by providing continuous, automated compliance monitoring with full audit trails stored in S3.