Saltware Provides AWS Security Review Service, SCR, to Backpacker
IT DAILY ·
✦ AI Summary
Saltware said on the 26th that it had provided its AWS security review service, SCR(Security Compliance Review), to Backpacker.
SCR is an AI-based AWS cloud security review service that checks 103 core items of the Korean Information Security Management System and Personal Information Protection Management System (ISMS-P) based on AWS Config.
As Backpacker expanded its idus operations, it needed to upgrade its security review and evidence management system for managing its AWS-based cloud environment and responding to ISMS requirements.
Saltware said on the 26th that it had provided its AWS security review service, SCR(Security Compliance Review), to Backpacker. Backpacker operates idus, a handmade commerce platform for crafts. Saltware said the purpose of the offering was to help advance cloud security operations systems.
SCR(Security Compliance Review) is an AI-based AWS cloud security review service built on AWS Config. AWS Config has the function of automatically reviewing and managing the configuration status of AWS infrastructure. SCR uses 103 core items from the Korean Information Security Management System and Personal Information Protection Management System (ISMS-P) as its review criteria to diagnose security settings in AWS cloud environments.
The review results are provided in an HTML-based visual report format. It also presents standard operating guidelines for AWS service use targeting Critical items with a high level of risk. Through this, it supports companies in responding immediately based on priority.
Existing similar security review services typically took more than 1 month from preliminary consultation to results, but SCR's key feature is speed. SCR operates by automatically analyzing AWS environments with AI, and customers only need to agree to AWS account permissions. No separate, complex preliminary procedures are required, and results can be checked in about 30 minutes, or in as little as dozens of minutes.
SCR covers user permissions and access control, data encryption and security management, and incident and disaster recovery in the event of failures or breaches. It is a review target that encompasses the core security areas of cloud operations.
As Backpacker's idus service grew, its AWS-based cloud environment expanded rapidly. As a result, the need for efficient management of operational status increased, and upgrading the security review and evidence management system for ISMS response also emerged as a task.
Using SCR, Saltware automatically diagnosed Backpacker's AWS environment and systematically analyzed its security status. It then provided diagnostic results and improvement guides, establishing a system for checking scattered security conditions against a consistent standard.
With automation applied to repetitive security review tasks, the company saw a major improvement in operational efficiency. Based on the expected benefits, Backpacker has begun reviewing ways to expand automation across its overall security operations.
SCR also supports the post-review stage and includes a function to provide standard operating guidelines for improving vulnerabilities within a company. If needed, Professional Services(ProServ) with direct involvement from Saltware engineers can also be provided, and the scope of ProServ support includes security consulting, AWS architecture optimization, periodic security reviews and advanced reports, and support for vulnerability remediation work.
Saltware plans to develop SCR beyond a one-time diagnostic service into a continuous security management platform. To that end, it said it plans to add a dashboard for checking real-time security status based on Security Score, as well as periodic automatic scanning functions. It also explained that it plans to support continuous detection of new vulnerabilities through weekly, monthly, and quarterly recurring reviews, visualize completion rates for improvements compared with previous reviews, and visualize residual risks.
An advanced version of SCR, released in April, can be purchased through the AWS Marketplace by companies considering adopting SCR. The offering is a Private Offer within the AWS Marketplace, and the contents of the Private Offer are customized quotes for each company. It is possible to proceed with marketplace contracts without separate preliminary consultation, and reviews can also be conducted through the marketplace.
Lee Jeong-geun, CEO of Saltware, said that securing cloud environment security is more important through continuous management and improvement systems than through a one-time review. He also said the company aims to make it easier and faster to diagnose enterprise cloud security levels with SCR, develop SCR into a platform based on continuous monitoring, and continue reducing customers' security operations burden.
Saltware held the Amazon Quick AI Workshop on the 4th. At the workshop, participants used the business AI assistant Amazon Quick(Amazon Quick) to connect corporate data, perform natural language-based data analysis, build AI agents, and practice workflow automation, with the goal of experiencing how to apply it to real-world work.
Source: IT DAILY · Kwon Young-seok
Original: https://www.itdaily.kr/news/articleView.html?idxno=241217
References
This article was produced with the help of an automated content generation algorithm.
Source: IT DAILY
View originalThis article was summarized and organized by BizCrush based on the original article from IT DAILY. For exact quotations and full details, please refer to the original article.