MetricStream CyberGRC works with AWS Security Hub, a cloud security posture management service from Amazon Web Services (AWS), to bring continuous control monitoring (CCM) capabilities to an organization’s cloud environment. With the MetricStream-AWS Security Hub integration:

• AWS Security Hub controls are automatically imported in entirety and mapped in the MetricStream CyberGRC libraries. AWS Security Hub performs control testing and monitoring continuously, providing users with near real-time results and status within the CyberGRC application.
• Customers have the flexibility to define additional GRC relationships for the AWS cloud security controls. AWS controls can be mapped to other GRC libraries such as requirements/standards, internal controls, assets, asset classes, etc. within CyberGRC.
• CISOs are better equipped to respond effectively to findings before a security event or compliance violation occurs, thereby reducing risk, improving security, and lowering costs.

In one quick glance, MetricStream-AWS Security Hub integration for Continuous Control Monitoring provides key insights such as how many controls are present in specific areas, such as PCI, CIS, AWS Foundation, and AWS security best practices, how many controls have failed and on what resources those controls have failed, the severity, and the total number of controls passed, enabling customers to make timely decisions.

Read More