AWS securityhub: Document new CRI Profile v2.2 Security Hub standard
Summary
Adds CRI Profile v2.2 to the list of supported Security Hub CSPM standards and links to its dedicated reference page.
Security assessment
Introduces documentation for a new compliance standard (CRI Profile v2.2) that Security Hub CSPM supports; it is a compliance/audit framework reference, not a fix for a specific vulnerability.
Evidence
+ * **CRI Profile v2.2** – This standard aligns with the CRI Profile, a compliance framework developed by the Cyber Risk Institute (CRI). The framework harmonizes cybersecurity and regulatory expectations that apply to the financial services sector into a common set of requirements. The framework generally applies to financial institutions and the organizations that serve them.
Diff
diff --git a/securityhub/latest/userguide/standards-reference.md b/securityhub/latest/userguide/standards-reference.md index 185df85..348448a 100644 --- a//securityhub/latest/userguide/standards-reference.md +++ b//securityhub/latest/userguide/standards-reference.md @@ -26,0 +27,2 @@ Security Hub CSPM currently supports the following standards: + * **CRI Profile v2.2** – This standard aligns with the CRI Profile, a compliance framework developed by the Cyber Risk Institute (CRI). The framework harmonizes cybersecurity and regulatory expectations that apply to the financial services sector into a common set of requirements. The framework generally applies to financial institutions and the organizations that serve them. + @@ -51,0 +54,2 @@ Individual controls can apply to more than one standard. If you enable multiple + * [CRI Profile v2.2](./standards-reference-cri-profile.html) +