Allgress Systems
Compliance Partner for AWS

Constantly changing cyber security risks environment, regulations, and the momentum of cloud computing has put pressure on organizations of all sizes to more effectively manage risks from within and their partners. However, a major hurdle for organizations regardless of verticals migrating to the cloud is adhering to the shared responsibility model resulting in complex uncertainties. Moreover, companies are in need of solutions to manage the shared responsibility model associated with the cloud or hybrid environments.

Allgress has provided a comprehensive IT risk management solution since 2008. Last year, Allgress introduced a GetCompliant Portal specific to AWS that identifies and reports on the shared, inherited, and customer specific controls so an organization can see a complete view of their compliance posture. Being customer driven, the firm has blended on-premise cloud solutions with the AWS environment making it a hybrid solution.

“We were the first vendor to provide automated assessment solutions for IT Risk Management buyers within the AWS environment using their APIs, before they realized they were going to need it,” says Jeff Bennett, President and Co-founder of Allgress. The tool simplifies compliance, enabling security and risk professionals to analyze, comprehend, and regulate corporate risks quickly and efficiently.

The Allgress GetCompliant Portal for AWS assesses compliance against regulations including HIPAA, CJIS, NIST, and FISMA to eliminate risk, and cuts down the timeframe to accomplish compliance. Moreover, the tool guides organizations through the compliance process, providing an automated process through the entire process.

To provide more comprehensive security and compliance capability within the AWS customer environment, Allgress provides the Continuous Compliance Monitoring and advanced-reporting module (CCM). This add-on module supports on-going compliance efforts, which include real-time monitoring of changes within the AWS customer environment, remediation workflows, dashboards, and advanced reporting. With the combination of assessment and CCM, customers can comprehensively manage their risk posture in an AWS environment.

In addition to the GetCompliant Portal for AWS, Allgress introduced the Regulatory Product Mapping Tool (RPM). Allgress designed this tool specifically for customers deployed within AWS who want a trustworthy way to easily identify AWS services, solutions in AWS marketplace, and APN technology partner that will help them reach specific regulatory requirements (such as ISO, NIST, and PCI-DSS controls).

An example of a third-party tool integrated with RPM is Allgress partner CloudCheckr—a Cloud Management Platform (CMP). The partnership enables AWS customers utilizing the CloudCheckr CMP to make compliance even easier for customers so they can easily check and verify the compliance and security of their cloud infrastructure in a unified view.

Allgress also provides its patented Business Risk Intelligence solution for IT security, compliance, and risk management across enterprise networks that automates entire IT GRC management process. “Our IT GRC management platform provides organizations’ information security and compliance professionals the control they need to manage risk posture inclusive,” expounds Bennett.

Allgress, a global provider of award-winning cost-effective solutions (GRC) for end-user organizations and third party vendors is one such organization. Down the road, Allgress will continue to augment the mapping of various compliance standards to help customers reduce their risk posture by complying with additional regulations and best practices. The organization plans to incorporate AI into its compliance process to make it more seamless for its customers. Allgress’ ITRM and GetCompliant solutions for the AWS environment have elevated the interest of adding support for an additional capability that will take Allgress to new heights.