- (301) 396-8455
- sales@balancelogic.com
A focused review of how your AWS accounts are secured, with findings ranked by risk and a plan your team can act on.
In AWS, a single setting can expose data or give an account more access than it needs. As environments grow, those settings are easy to lose track of. An AWS security assessment checks how your accounts are configured, explains the risks in plain English and ranks them, so you know what to fix first.
Who can sign in, what each user and role can do, and whether privileged accounts use multi-factor authentication (MFA).
Security groups and network settings that leave services open to the internet when they don't need to be.
Storage permissions and encryption for data at rest and in transit.
Whether activity is logged, and whether anyone would notice something unusual.
Whether the servers you run in AWS are kept up to date.
How findings relate to the frameworks you follow. For defense contractors, findings can be mapped to the National Institute of Standards and Technology (NIST) SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) Level 2 requirements. Compliance support for HIPAA, NIST, SOC 2 and PCI DSS.
We agree which AWS accounts and services are in scope, and which frameworks matter to you.
We review configurations using AWS's own security tools and manual checks.
Each finding is ranked by severity and business impact, in plain English.
We walk leadership and your technical team through the results and a prioritized plan.
Working toward CMMC? The assessment covers your AWS accounts only. For the full picture, including a NIST SP 800-171 review, your controlled unclassified information (CUI) boundary and a prioritized roadmap, ask about a Balancelogic CMMC Readiness Review.
Need a broader security picture beyond AWS? See our cybersecurity assessments. For a review across all six Well-Architected pillars, see our AWS Well-Architected Review.
We can also help you find out whether AWS credit or funding programs apply to your project. Eligibility and terms are set by AWS.
AWS Select Tier Partner. AWS Well-Architected. Our cloud team holds AWS, Microsoft Azure and CompTIA Cloud+ certifications. Bill Campbell, CEO, CISSP, CSCP.
Our work supports your compliance program. It doesn't guarantee compliance, certification, or assessment results.
Balancelogic is a Managed Technology Provider (MTP). We own the plan; your IT team or provider keeps running the environment day to day. Owning the technology function and managing technology are complementary roles. The findings come with a plan your team, your provider or our cloud team can carry out.
An AWS security assessment goes deeper on security: access, network exposure, data protection and logging. A Well-Architected Review covers all six pillars of the AWS framework, including reliability and cost, with security as one of them.
Access is agreed during scoping. Assessments typically work from temporary, read-only access.
Yes. We can show how findings relate to the framework you follow, including NIST SP 800-171 and CMMC Level 2 requirements for defense contractors. Compliance support for HIPAA, NIST, SOC 2 and PCI DSS. The assessment supports your compliance program; it isn't a certification or an audit. Certification assessments are conducted by an authorized third party, such as a Certified Third-Party Assessment Organization (C3PAO).
Yes, as a separate project, or your IT team or provider can make the changes using the plan. Balancelogic partners with our sister company ITAssurance℠ when ongoing managed IT, cybersecurity, and operational support are needed.
Tell us which accounts you run and what you need to answer to, and we'll talk through what an assessment would cover.
Book a free IT Strategy Session.Preparation and success go hand in hand.
Connect with us.