Tag: compliance

Feed: Puppet.com Blog RSS Feed. Author: ; This blog is the third in a four-part series about how Puppet can help government agencies meet compliance and security requirements. Read the second post here.Government agency IT departments know that migrating applications to the cloud can improve efficiency, increase visibility, and reduce costs. They also recognize the value in keeping some operation resources on-premises. This shift to hybrid operations creates complexity and a need for government IT infrastructures to accommodate many different types of resources. But how can teams efficiently manage a complex hybrid infrastructure while ensuring their agencies’ Zero Trust security ... Read More

Feed: AWS Partner Network (APN) Blog. Author: Marshall Jones. By Marshall Jones, CTO and Co-Founder – Very Good Security (VGS)By Chintan Sanghavi, Sr. Partner Solutions Architect – AWS VGS Very Good Security (VGS) is an AWS Partner that offers a modern approach to payments compliance and personally identifiable information (PII) protection. To meet compliance like PCI-DSS, SOC2, HIPAA, GDPR, and ISO27001, a customer typically has to change their architecture and workload, which can take significant time, money, and effort. At a minimum, customers must: Find all of their sensitive data. Protect data with permissions. Encrypt data at rest and in ... Read More

Feed: Recent Announcements. Amazon Timestream is now in scope for FedRAMP Moderate in the following AWS Regions: US East (Ohio), US East (N. Virginia), US West (Oregon). You can now use Amazon Timestream to collect, store, query, and visualize time series data in various applications within your Amazon Virtual Private Clouds (Amazon VPC) to help you meet FedRAMP Moderate controls. Amazon Timestream is a fast, serverless, secure, and purpose-built time series database for analytics, DevOps, and IoT applications that can scale to process trillions of time series events per day. Amazon Timestream simplifies data lifecycle management through the use of data ... Read More

Feed: Recent Announcements. AWS Resource Access Manager (AWS RAM) can now be used for workloads subject to Service Organization Control (SOC) compliance and International Organization for Standardization (ISO) ISO 9001, ISO 27001, ISO 27017, ISO 27018 and ISO 27701 standards. Now, customers in finance, healthcare, and other regulated sectors can get insights into the security processes and controls that protect customer data which can be found in the SOC reports, AWS ISO and CSA STAR certificates in AWS Artifact. AWS' alignment with these standards in addition to the independent third-party assessment of these internationally recognized code of practices demonstrates AWS' ... Read More

Feed: Recent Announcements. AWS Backup Audit Manager now allows you to audit and report on the compliance of your data protection policies for hybrid VMware workloads. With this launch, you can include the VMware Virtual Machines in AWS Backup Audit Manager’s controls to maintain the compliance status of your organizational data protection policies and to generate unified auditor-ready reports for your VMware workloads across VMware Cloud on AWS, on premises, and on AWS Outposts. AWS Backup Audit Manager is available in the US East (Ohio, N. Virginia), US West (N. California, Oregon), Canada (Central), Europe (Frankfurt, Ireland, London, Paris, Stockholm), South ... Read More

Feed: Cloudera Blog. Author: Wim Stoop. Posted in Business | May 02, 2022 4 min read As digital transformation accelerates, and digital commerce increasingly becomes the dominant form of all commerce, regulators and governments around the world are recognizing the increased need for consumer protections and data protection measures. The European Union has been at the vanguard for some time (most recently having reached provisional agreement on the Digital Services Act) but from Australia to Brazil, from South Africa to California (the rest of the US hasn’t quite caught on yet!), from China to the UK, new data governance and ... Read More

Feed: Recent Announcements. AWS Security Hub has released support for cross-Region security scores and compliance statuses to enable a more complete view of your security posture across all of your accounts and Regions. Last year, Security Hub added support for cross-Region aggregation of findings. This release extends Security Hub's capabilities to now also support cross-Region security scores and compliance statuses, if you have set up an aggregation Region. The security scores for each standard and compliance statuses for each control in your aggregation Region will reflect a composite view across your linked Regions. Your security scores and compliance statuses in ... Read More

Feed: Recent Announcements. AWS Resource Access Manager (AWS RAM) is now authorized as FedRAMP Moderate in US East (N. Virginia), US East (Ohio), US West (N. California), and US West (Oregon) and as FedRAMP High in AWS GovCloud (US-West) and AWS GovCloud (US-East). The Federal Risk and Authorization Management Program (FedRAMP) is a US government-wide program that delivers a standard approach to the security assessment, authorization, and continuous monitoring for cloud products and services. FedRAMP uses the National Institute of Standards and Technology (NIST) Special Publication 800 series and requires cloud service providers to receive an independent security assessment conducted by a ... Read More

Feed: Recent Announcements. In addition to receiving FedRAMP authorization, AWS Network Firewall is compliant with PCI DSS, SOC, and the following ISO standards: 9001, 27001, 27017, 27018, 27701. AWS Network Firewall is also a HIPAA eligible service. To learn more, visit AWS Compliance Programs, or visit the AWS Services in Scope by Compliance Program webpage to see a full list of services covered by each compliance program.   ... Read More

Feed: Recent Announcements. AWS Backup Audit Manager adds new controls to further simplify the compliance auditing and reporting of your data protection policies. You now have controls for ‘cross-Region copy’ and 'cross-account copy’, which enable you to demonstrate compliance of creating logical air-gapped backups across AWS Regions and AWS Accounts in accordance with your disaster recovery strategy. Additionally, you now have a control for ‘backups protected by AWS Backup Vault Lock’ which helps you track whether your backups are immutable via WORM (write-once, read-many) capabilities, to protect your application data from inadvertent or malicious actions. To begin using these new AWS ... Read More