Governance & compliance

Teri Radichel

CEO, 2nd Sight Lab

As an AWS Security Hero, I help organizations reduce risk via penetration tests and security assessments. Understanding the configuration and architecture of your AWS environment and related vulnerabilities or liabilities and associated risk is at the core of GRC. But how do you track and manage all those configurations?

Leveraging AWS services and automation can help you with some of the most challenging aspects of GRC, which include:

• Balancing compliance with the ability for organizations to deliver on business goals.
• Reducing the frequency and/or impact of attacks.
• Providing timely and accurate data for risk-based decision-making.
• Using actionable data that has clear next steps to reduce risk.
• Identifying findings to remediate them before an audit or assessment.
• Preventing non-compliant configurations altogether.

There are so many great sessions at AWS re:Inforce 2024, but this guide includes some that can help with your GRC objectives.