Security Maturity Assessment

OVERVIEW

AWS utilizes a shared responsibility model for security, where customers are responsible for their data platforms, applications, and identity and access management, along with other elements. Meeting your shared obligations requires targeted security measures and practices, and the AWS Security Maturity Model helps businesses understand where to begin implementing security controls to improve their security posture.

SecurityHQ’s Maturity Assessment follows the processes and criteria defined by the AWS Security Maturity Model to determine your current security posture and identify actions you can take to reach your ideal security state.

Understanding the Maturity Assessment criteria As part of your Maturity Assessment, our security experts cover the 10 capability areas identified in the AWS Cloud Adoption Framework (CAF), how each area contributes to your overall security posture, and how your enterprise’s architecture, practices, and processes align with each.

• Security governance
• Security assurance
• Identity and access management
• Threat detection
• Vulnerability management
• Infrastructure protection
• Data protection
• Application security
• Incident response
• Resiliency

Our Maturity Assessment also explores how your organization aligns with the four phases outlined in the AWS Security Maturity Model.

Phase one: quick wins that can often be deployed in a week or two and that deliver important benefits early in your maturity journey.

Phase two: foundational activities that form the basis of your security posture. They take more effort to implement but provide a critical foundation for security maturity.

Phase three: efficient controls and recommendations that allow efficient governance of cloud security.

Phase four: optimized activities that enable your organization to apply a continuous improvement cycle to your security posture.

Deliverable We’ll provide you with a presentation that outlines your position in the AWS Security Maturity Model and highlights opportunities for advancement. You’ll have actionable insights to move forward in your journey with clear steps to improve your security posture. Our security experts are also available to discuss resource requirements and other details in preparation for executing your next actions.