Hello Fishes!

I have an requirement of do the CIS benchmarking of my client AWS services. I am looking to run compliance test.

What are the tools that can do the CIS benchmark test apart from Qualys?

I want to run compliance as per CIS on AWS services like, Jenkins, RDS Dynamo , S3, Redshift, Elastic cache, Guard Duty etc.



Please let me know

like
Posting as :
works at
You are currently posting as works at

AWS have some tool for this

could you please help in letting me know? is it in aws cloud platform? under which section?

You can enable security hub in the account, it will cost some money but you’d be able to run complete benchmark for the entire account, and all the resources in to, also if you are looking for some external tools, you can go for prowler, it’s a feel open source tool, and generates really accurate reports

Related Posts

like

Seattle Fish - I’m moving to the area with my SO. What neighborhoods besides Capital Hill would be a great place to stay? I’d be commuting to Bellevue. We enjoy going out to restaurants, hiking, but also cook a lot so access to grocery store nearby would be nice too. Both would have cars

Iceland in Mid April
1) recommended with a 2.5 year old?
2) hotels to stay in - any good Marriott properties?
3) must do

like

Hi all,
Q1: Are there many onsite opportunities at EY GDS?
Q2: If yes, how is the travel policy? Basically how company supports international travel of employees?
@EY

like

Hi everyone,
Need help reg TCS BGC process.
Now I have only 2 days to accept the offer, not yet accepted.
My queries are 1) my 1st exp original services letter is not found ( lost somewhere), have scanned copy , I have supporting doc like form no 16 , full and final settlement , salary slip
2) i don't have a relieving letter from one of the org as they only provided an exp letter, in the same company.
HR is asking for all ex employee bank statement, my first company bank account is 12 yearold

like

I got an offer for senior Salesforce associate for support project. The skill set mentioned was LWC, apex and configuration. Wanted to understand how the work will be for Salesforce support in PWC.

like

Hi fishes,
I am in PwC AC Bangalore in management consulting in DDV. Do they reimburse for the CFA level 1 exam? If yes, what could be the clause?

like

I broke my pwc provided smartphone post RL discussion

What to do? Will I be penalized for it?

funnyuplifting
like

Is it true that people joining for Oracle practice at PWC AC Bangalore are on bench due to shortage of projects right now ?

like

Does anyone mine bitcoin?? Any advice for someone interested in getting in to bitcoin??

like

How reliable is the Gartner Career site where you can see the status of an application? 2 weeks after an interview, and I haven’t heard anything but the status still says In Process.

like

Guys thoughts on #NNN..??
Any 1 lost already..?

like
like

Hi fishes,

Please tell me which one to join
Schneider Electric or Daimler Very confused both have same salary and iot projects.just 2bdays to join. Please help

Daimler Truck Innovation Center India Schneider Electric

Going to London in 2 weeks! Unfortunately the news was heartbreaking about the Queen and it’s still being talked about of course.

Should I still go on with this trip or should I exchange for a different date because I don’t know what else could happen during this trip? Maybe I’m overreacting :/

likefunny

I’m a first year. Getting a heavy case load - general liability, med mal, FELA, and products. I don’t really know how to organize my outlook email inbox. Any suggestions on where to start would be great. I’ve struggled with being organized in the past and obviously looking to improve in this respect. Thanks.

like

Somewhat recently lateraled from a large firm to a small firm and I’m starting to feel very micromanaged. Any tips on how to deal with this?

like

Additional Posts in Cyber Security Professionals

Hi All
Which platform is best to connect with Palo Cortex XSOAR professionals in India

Hey everyone,

Looking for any openings in SOC analyst role. Please DM me or comment if someone can refer me.

Thankyou.

likehelpful

Hello Folks,
Is it advisable for a person working in networking domain (YOE - 7.5) to move to information security?

like

Hi Folks!!

Having a total of 4YOE in IT, and specific in 2 years in cyber security, Can I apply for MNC companies ???


If yes, please suggest which company I should try this moment. YOUR SUGGESTIONS IS HIGHLY APPRECIATED ☺️

like
like

Fishes profile ma kya likhu
Jo phle se likha hai vho bekar hai

Thanks in advance

Post Photo
like

Hello,
I am about to finish my notice period working as a SOC L1, yeo 2 please help me with how much I should ask for salary in next company, ctc 4.26 total year of exp 4

like

I am looking for job change 10 years experience in application security, vulnerability assessment vulnerability scanning and vulnerability management,sast,dast
Current location : chennai
Preferred location: chennai , coimbatore, madurai and remote
Kindly refer me in your organization if they have opening

like

What type of client mostly Aujas Cyber security have in VAPT?? How much percentage appraisal will happen there ? Aujas

like

Security Folks kindly advise please.!!
1. Is Comptia Security+ or Comptia Pentest+ certificate worth it.?
2. Should I prepare for CRTP or PNPT?
3. I should only focus on OSCP?

2yr experience in red teaming & preparing for my 1st switch in product based companies & FAANG

like

I have total 4.5 years of experience in pentesting
Certs: CEH, OSCP and CRTP

What should be my expected CTC? My current is 12.5L

like

Hi all,

I am looking for a job switch and have 5 YOE as Information security analyst. Pls help me with any referrals.

like

How much time do u need to prepare for ccsk?

Which company would be great to join as SAP Security and GRC consultant?
Capgemini or Protiviti
Money is an important but not the driving factor, its only about learning and try risk advisory.
YOE: 7 years

like

Hey fishes,

I am working as a cloud engineer (managing enterprise cloud for the organisation), some common things I am working on right now are, setting up cloud governance framework, implementing guardrails, enforcing policy etc. I want to switch into cybersecurity expert (specially for cloud) can anyone guide me though the path, the dos and don’ts etc.

Thanks in advance 😀

like

I am actively Looking for Job Change having 2.8+ yrs of experience in Cyber security domain ,#cybersecurity, #networksecurity , #SIEM , Log analysis, incident response, threat hunting and vulnerability assessment. Ready to relocate , Any leads could be helpful for me. Hope to hear from you soon. For further information please contact me.

I am looking for change the firm either to uk / Canada

Can I get Visa sponsership to change .. if yes please help me out.

like

Hello fishes,

Can anyone reffer me for SOC Analyst?

I have an offer from E&Y.

Does anyone has interview preparation material?

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal