AWS securityhub: Add CRI Profile v2.2 mapping to AWS Backup Security Hub control
Summary
Extends the 'Related requirements' line of an AWS Backup control with CRI Profile v2.2 data-protection and secure-configuration requirement mappings.
Security assessment
Only compliance-framework identifiers are appended to an existing mapping line for a backup control; no backup configuration, encryption, or retention guidance is modified, so there is no concrete vulnerability being addressed.
Evidence
**Related requirements:** NIST.800-53.r5 CP-9(8), NIST.800-53.r5 SI-12, CRI Profile v2.2/PR.DS-01.01, CRI Profile v2.2/PR.DS-11.01, CRI Profile v2.2/PR.PS-01.06
Diff
diff --git a/securityhub/latest/userguide/backup-controls.md b/securityhub/latest/userguide/backup-controls.md index f7fd27c..8cd1230 100644 --- a//securityhub/latest/userguide/backup-controls.md +++ b//securityhub/latest/userguide/backup-controls.md @@ -17 +17 @@ These controls may not be available in all AWS Regions. For more information, se -**Related requirements:** NIST.800-53.r5 CP-9(8), NIST.800-53.r5 SI-12 +**Related requirements:** NIST.800-53.r5 CP-9(8), NIST.800-53.r5 SI-12, CRI Profile v2.2/PR.DS-01.01, CRI Profile v2.2/PR.DS-11.01, CRI Profile v2.2/PR.PS-01.06