Amazon Web Services for FFIEC Cybersecurity Assessment Tool
What Amazon Web Services’s data evidences toward FFIEC Cybersecurity Assessment Tool today, and how to connect it.
What Amazon Web Services evidences here
- Cloud configuration checks feeds Cybersecurity Controls
This is where Amazon Web Services’s data is documented as relevant on our FFIEC Cybersecurity Assessment Tool page — not a pre-built, automatic control mapping. You configure which controls it maps to inside CMDash.
How you connect Amazon Web Services
Reads your AWS configuration directly — root MFA, root access keys, password policy, S3 Block Public Access, CloudTrail, KMS key rotation and EBS encryption. Needs a read-only IAM credential and nothing else; no Security Hub subscription required.
About FFIEC Cybersecurity Assessment Tool
The structure of the FFIEC Cybersecurity Assessment Tool, kept for banks and credit unions that assessed against it. The FFIEC retired the tool on 2025-08-31, so this is a legacy structure, not current guidance.
Component level only: the tool's declarative statements by maturity level and its Inherent Risk Profile are not included, and the wording is CMDash's own. The FFIEC named NIST CSF 2.0 and the CISA Cybersecurity Performance Goals as current resources.