From the course: Complete Guide to AWS Security and Compliance Management

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

Prepare for a security audit

Prepare for a security audit

- [Instructor] You need to be ready for the inevitable audit. Be prepared to demonstrate how your AWS configuration meets your various compliance obligations. First, you must understand what the audit is asking you to verify. Is it a financial, security, or a compliance audit? You need to identify the applicable standards for your situation, anything from PCI DSS for payment card transactions to GDPR For European operations. Clearly define the scope of your audit, including which services, resources, data, and configurations are included. With the scope understood, identify the security and compliance resources available to you within AWS. This includes AWS's compliance programs and related documentation available in Artifact. Don't forget to include current security best practices documentation to ensure that you're up-to-date with the latest recommendations. In addition, review your existing governance and access controls. Specifically, ensure that IAM policies are configured…

Contents