Do Your Part to be Continually Compliant

Security in AWS is a shared responsibility, so while AWS manages security of the cloud, you are responsible for security in the cloud. It follows, then, that while you will inherit some NIST 800-53 controls from the AWS infrastructure, you need to do your part to ensure that the software you’ve deployed in the cloud as well as some networking, firewalls and access are in alignment with NIST best practices. Managing, measuring and reporting on your environments compliance state can be cumbersome without security automation to help. That’s where ESP and the NIST 800-53r4 Moderate / FedRAMP Compliance View can help.

NIST Compliance

Make Compliance Evident With NIST 800-53 Compliance Views

One-click Reporting

Don’t spend weeks interrogating systems to aggregate a compliance report for audits. With one click, you can run a report and export it for auditors.

Faster Remediation

Monitoring, assessment, and remediation of cloud infrastructure risk can all managed from the ESP single platform in real-time.

Complete View

Stakeholders have an easy way to view, monitor and report on the security and compliance of their entire AWS ecosystem.

Compliant From Day 1

Monitoring security throughout the entire development lifecycle ensures compliance from the beginning and avoid expensive changes late in the cycle.

NIST 800-53r4 Compliance View Features

ESP Dashboard

No More Guessing About Your Compliance State

With growing cybersecurity and regulatory pressures, you need to be able to understand the state of compliance quickly and easily. By taking a security-first approach to NIST and FedRAMP compliance you can be sure that everyone in your organization is following best practices and remediating risks as they arise in the cloud environment. On the main Evident Security Platform (ESP) dashboard, you see the number of failing checks that need to be addressed to get to a more compliant state.

ESP Compliance View NIST 800-53 Controls

Security Checks Mapped to the NIST Controls

This ESP Compliance View will assist you in assessing your AWS accounts against NIST 800-53r4 - Moderate Impact and FedRAMP Enhancements, Parameters, Additional Requirements, and/or Guidance. NIST 800-53 represents a comprehensive set of controls broken down by Families, Major, and Sub-parts. Many of the controls are interdependent and often when one Major / Sub-part Control Family is met, another can also be met. Inversely, when one isn't met, another one isn't as well. We’ve eliminated the complicating mapping process for you so you can spend more time remediating risks and adding value in other areas.

NIST Quick Start

NIST Quick Start to NIST Quick Reporting

AWS provides various NIST Quick Starts and Standardized Architectures that help you build NIST-compliant environments with ease. But starting compliant doesn’t mean that you stay compliant. The systems running in the cloud must be monitored continuously from development to deployment, so that risks that will take you out of compliance can be remediated quickly. The drill down reports for each of the control Families will show you exactly what needs to be fixed, which accounts are affected, and which teams have the most work to do to get your systems back to a Passing state.

NIST 800-53 PDF

Included in the NIST 800-53 Compliance View

We’ve mapped all of the testable security controls to the relevant ESP security checks to provide you:

  • At-a-glance view of test results by AWS account
  • Scoring per each compliance standard
  • Compliance reports based on latest results from ESP continuous security monitoring
  • Ability to export compliance reports in formats relevant to auditors
  • API capabilities for automated compliance test results
  • 3rd party integrations for ingestion of compliance test results into 3rd party systems

  • Supported Compliance Benchmarks

    CIS AWS Foundations Benchmark

    CIS AWS Foundations Benchmark