Cloud Security Audit (CIS Benchmarks)

This skill provides a structured framework for performing security assessments on cloud environments based on the Center for Internet Security (CIS) benchmarks. It guides users through the entire audit lifecycle, from selecting the correct benchmark versions (AWS v5.0, Azure v4.0, GCP v4.0) and executing automated scans with tools like Prowler and ScoutSuite to interpreting results and implementing technical remediations. It is essential for organizations preparing for SOC 2 or ISO 27001 certifications or simply looking to establish a robust security baseline and continuous compliance monitoring for their cloud infrastructure.

主な機能

ユースケース