Optimizing audits with automation
summary
Cloud audit automation claim: collect once map many and stop chasing screenshots. AWS Audit Manager ingests Config and Security Hub checks, CloudTrail user activity and service‑to‑service APIs, and stores immutable storage with SHA384 digest so auditors can verify provenance. Evidence Finder surfaces historical and live results for framework controls. Deloitte extends outputs via Nexus/Cortex into persona dashboards and GRC connectors to enable continuous compliance. Customers report automation cuts the tens to hundreds of hours per audit they used to spend.
AI-written summary · about
chapters (18)
- 0:00Intro
- 2:48Compliance at cloud scale
- 3:39Typical audit experience can be...
- 4:11Example: Privileged user access reviews
- 4:58What makes audits inefficient
- 6:10How we gained efficiencies
- 13:39How does AWS Audit Manager work?
- 18:47Immutable storage
- 20:18Automated testing - Second line view
- 20:57Evidence mapped to framework controls
- 23:03PCI audit example - Firewall review
- 24:29PCI audit example - Cloud configuration evidence
- 25:19Wrapping up in-the-cloud audit
- 27:18Poll: Which persona most closely matches your organization when it comes to automation of evidence extraction for audits and compliance requirements?
- 28:37Poll: Which tools are you utilizing to drive automation in your environment?
- 29:39The evolution of audit
- 34:14Streamlining audit and compliance with
- 42:09Forward and future outlook
related talks
56mCloud compliance journey: Compliance and audits
32mContinuously assess controls for risk and compliance
29mCloud compliance and assurance
58mImplementing compliance, assurance, and auditing on
55mAccelerating auditing and compliance for generative AI on AWS
30mHow to implement compliance at scale with the Three Lines of Defense model
19mA close look at compliance with AWS Cloud Audit Academy
07mAutomating your audit