itb-nz logo
Story image

ISACA launches new resources for auditing AWS

07 May 2019

The use of cloud services is widespread and expected to only continue to increase by 2020, it is estimated that 41 per cent of enterprise workloads will be hosted on public cloud platforms.

One of the leading platforms in this space, Amazon Web Services (AWS), has the ability to help teams become more agile; however, without proper knowledge of AWS configurations and potential hazards, enterprises may also open themselves to new risks.

With this in mind, ISACA has launched a new audit program, Amazon Web Services (AWS) Audit Program to support IT auditors in their assessments of AWS deployments, including the use of AWS services, access to the AWS environment, management and interrelationships of AWS services.

The program covers AWS applications, functions and containers, and across the domains of governance, network configuration and management, asset configuration and management, logical access control, data encryption controls, logging and event management, security incident response and disaster recovery.

IT audit professionals can follow detailed testing steps outlined for controls across these domains in this audit program spreadsheet to assist in their auditing process, but they are encouraged to customise the document for their unique enterprise needs. The program is free to members, and $25 for non-members.

“ISACA's AWS Audit Program provides IT audit professionals with the essentials for grasping the breadth and depth of AWS deployments as well as to provide them with a solid foundation for building their own customised audit program around these services,” said CISA lead developer AWS Audit Program Adam Kohnke.

Now in its 50th anniversary year, ISACA is a global association helping individuals and enterprises achieve the positive potential of technology. Today’s world is powered by information and technology, and ISACA equips professionals with the knowledge, credentials, education and community to advance their careers and transform their organisations.

ISACA leverages the expertise of its 460,000 engaged professionals including its 140,000 members in information and cybersecurity, governance, assurance, risk and innovation, as well as its enterprise performance subsidiary, CMMI Institute, to help advance innovation through technology.

Link image
<span class="coloured">Unleash the intelligent way to automate at Pega Discover – Intelligent Automation</span>
Find out how the world’s largest brands are accelerating business and simplifying systems in this two-hour, interactive virtual event. By the end you’ll be primed to start getting business done smarter and faster while scaling toward your biggest business goals. Register Now.More
Story image
ServiceNow extends Microsoft partnership with new Teams functionality
Powered by ServiceNow’s digital workflow platform, the Now Platform, the new capabilities are also said to improve agent productivity by enabling them to more effectively collaborate and complete key tasks in Microsoft Teams.More
Story image
NetApp announces Elastigroup for Azure Spot VMs
NetApp has announced Elastigroup for Microsoft Azure Spot Virtual Machines (VMs) is now available, aiding in businesses wanting to improve automation of computing infrastructure.More
Link image
How to effectively accelerate 5G device workflow
Achieving a first-to-market advantage in 5G requires innovative network emulation solutions that accelerate the device workflow. Find the 5G network emulation software that's right for you.More
Story image
The importance of selecting a secure SD-WAN solution
It’s essential to adopt a secure SD-WAN solution to avoid the risks that an unsecured SD-WAN solution can introduce, writes Wavelink managing director Ilan Rubin.More
Story image
2020 has profoundly changed how we work – so what now?
To navigate these changes now and into the future we need to build adaptable technologies and resilient workforces that can adjust on the fly.More