Managing Governance and Compliance

The Governance and Compliance service module protects your information assets and helps keep your AWS infrastructure secure by using multiple controls. SoftwareOne maintains a library of AWS Config Rules and remediation actions to ensure that all your accounts comply with industry standards for security and operational integrity.

AWS Config Rules continuously tracks the configuration change among your recorded resources. If a change violates any rule conditions, SoftwareOne reports its findings and allows you to remediate violations automatically or by request, according to the severity of the violation. AWS Config Rules facilitate compliance with standards set by: AWS Foundational Security Best Practices and Center for Internet Security (CIS).

Architecture

SoftwareOne utilises a centralised deployment of the AWS Config Service to apply Foundational Security Best Practices and AWS’s CIS Compliance Pack across all accounts in scope.

The following diagram gives a high-level view of the architecture: