CISA Cyber Essentials framework

cisa_aws

CISA

OfficialVerified

Cybersecurity & Infrastructure Security Agency's (CISA) Cyber Essentials is a guide for leaders of small businesses as well as leaders of small and local government agencies to develop an actionable understanding of where to start implementing organizational cybersecurity practices.

16requirements89checks

Prowler prowler-provider-aws

Run this compliance with Prowler

Run in Prowler Cloud

Run

prowler aws --compliance cisa_aws

Requirements (16)

your systems382

your-systems-1Learn what is on your network. Maintain inventories of hardware and software assets to know what is in play and at-risk from attack.4

Attributes

Item Id: your-systems-1
Section: your systems
Service: aws

your-systems-2Leverage automatic updates for all operating systems and third-party software.3

Attributes

Item Id: your-systems-2
Section: your systems
Service: aws

your-systems-3Implement security configurations for all hardware and software assets.75

Attributes

Item Id: your-systems-3
Section: your systems
Service: aws

your surroundings418

your-surroundings-1Learn who is on your network. Maintain inventories of network connections (user accounts, vendors, business partners, etc.).2

Attributes

Item Id: your-surroundings-1
Section: your surroundings
Service: aws

your-surroundings-2Leverage multi-factor authentication for all users, starting with privileged, administrative and remote access users.3

Attributes

Item Id: your-surroundings-2
Section: your surroundings
Service: aws

your-surroundings-3Grant access and admin permissions based on need-to-know and least privilege.8

Attributes

Item Id: your-surroundings-3
Section: your surroundings
Service: aws

your-surroundings-4Leverage unique passwords for all user accounts.5

Attributes

Item Id: your-surroundings-4
Section: your surroundings
Service: aws

your data564

your-data-1Learn how your data is protected.12

Attributes

Item Id: your-data-1
Section: your data
Service: aws

your-data-2Learn what is happening on your network, manage network and perimeter components, host and device components, data-at-rest and in-transit, and user behavior activities.44

Attributes

Item Id: your-data-2
Section: your data
Service: aws

your-data-3Domain name system protection.1

Attributes

Item Id: your-data-3
Section: your data
Service: aws

your-data-4Establish regular automated backups and redundancies of key systems.7

Attributes

Item Id: your-data-4
Section: your data
Service: aws

your-data-5Leverage protections for backups, including physical security, encryption and offline copies.0

Attributes

Item Id: your-data-5
Section: your data
Service: aws

your crisis response12

your-crisis-response-2Lead development of an internal reporting structure to detect, communicate and contain attacks.2

Attributes

Item Id: your-crisis-response-2
Section: your crisis response
Service: aws

booting up thing to do first311

booting-up-thing-to-do-first-1Lead development of an internal reporting structure to detect, communicate and contain attacks.5

Attributes

Item Id: booting-up-thing-to-do-first-1
Section: booting up thing to do first
Service: aws

booting-up-thing-to-do-first-2Require multi-factor authentication (MFA) for accessing your systems whenever possible. MFA should be required of all users, but start with privileged, administrative, and remote access users.3

Attributes

Item Id: booting-up-thing-to-do-first-2
Section: booting up thing to do first
Service: aws

booting-up-thing-to-do-first-3Enable automatic updates whenever possible. Replace unsupported operating systems, applications and hardware. Test and deploy patches quickly.3

Attributes

Item Id: booting-up-thing-to-do-first-1
Section: booting up thing to do first
Service: aws