MIDASEC08-BP01 Align security controls with industry standards
Implement security controls across industrial workloads, and map those controls to recognized industry standards such as NIST 800-82, ISO/IEC 27001, and IEC 62443.
Desired outcome: Security implementations are auditable, and your organization improves its compliance with applicable industrial regulations.
Benefits of establishing this best practice: Streamlines audit processes, standardizes your security practices, and demonstrates due diligence in regulated industries.
Level of risk exposed if this best practice is not established: High
Implementation guidance
Use AWS Audit Manager and AWS Control Tower to align cloud configurations with industry-standard security frameworks.
Implementation steps
-
Identify regulatory and industry-specific frameworks applicable to your workloads.
-
Map AWS services and controls to required standards using AWS Audit Manager frameworks.
-
Continuously monitor control adherence using AWS Config and Security Hub CSPM.
-
Integrate compliance requirements into the CI/CD process for industrial apps.
Resources
