ACC Security Assessment

Overview

ACC has come up with a support model which enables the clients to monitor their AWS infrastructure for various security compliance on cloud. These includes running various AWS Native, opensource and 3rd part services to continuously monitor the AWS infra on cloud.

Use of mix of AWS provided tools, third party and open-source tools (subject to approval from client) and manual checks to perform the gap analysis and risk assessment of the AWS environment.

The resources required for the engagement include:

1. Native Tools: Security Hub, Amazon Inspector, Guard Duty, AWS Config, AWS Audit Manageretc.
2. Open-Source/3rdparty Tools: Trend MicroCloudConformity, Prowler, ScoutSuite, Tenable.io Nessus etc.

Collate and prepare gap analysis report which will be enforcing on the below areas:

1. Oragnization & Account level controls
2. Governance & Compliance
3. Identity Access Management
4. Data Protection and Encryption
5. Infrastructure Security
6. Network Security