可采取的管控措施以改进治理和合规性.pdf

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.C O P 3 4 7Actionable controls for improving governance and complianceRodolfo Breneshe/himPrinc.SA Cloud GovernanceAWSArnaud Coulondrehe/himPrinc.Product Manager AWS

2、 Control TowerAWS 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Getting startedSelection and mappingImplementationAssessment and monitoringAuditing Key TakeawaysAgenda 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliat

3、es.All rights reserved.To whom and why are controls important?2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Many stakeholders,different objectives 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Main Cloud Governance objectivesSecurityOperationsComplianceCostR

4、isk Mitigation 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Customer challengesStriking the right balance between innovation and controlsKeeping pace in evolving regulatory environmentsMeeting agility demands to support business change Enabling cost and operational efficiency a

5、cross your environments7 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.A risk management framework An evolving threat landscape requires a risk-based control approach.Different frameworks provide guidance,but a unified strategy is ideal.2025,Amazon Web Services,Inc.or its affili

6、ates.All rights reserved.A risk-based approach for controlsSelectImplementAssessMonitor 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.What are your compliance objectives?PCI-DSSCenter of Internet SecurityAWS Best Practices 2025,Amazon Web Services,Inc.or its affiliates.All right