Vulnerability Management

• Risk management framework
• Vulnerability program
  • Vulnerability Statement
  • Vulnerability Framework
• User and administrator access controls
  • User and vendor access
  • Staff and Administrator access
• AWS Network Security
  • AWS’s shared responsibility model for security
  • CloudTrail security configurations policy
  • Identity and Access Management (IAM) policy
  • Hosting checklist
  • Backup and disaster recovery arrangements
• Data Security and Management
  • Data storage security and management
  • Data in transit
  • Monitoring of data in storage and transit
  • Control of data integrity
  • Scrubbing or anonymizing data
  • Set up to protect the website (firewalls, IPS)