Free AWS Cloud Security Posture Assessment
An independent read on your AWS security posture, delivered in a two-hour read-only session by a CISSP with 18 years of engineering and security leadership. No agents, no hand-offs, no obligation.
- Duration
- 2-hour session
- Deliverable
- 10 business days
- Access
- Read-only IAM role
- Price
- No cost
Built for a specific situation
- Preparing for a compliance audit and need to know where you stand before the formal review
- Running a multi-account environment and want guardrails in AWS Organizations and Control Tower verified
- Post-migration or post-expansion, confirming identity, logging, and data protection kept pace
- A growing team with no dedicated cloud security function that needs a prioritized fix list
What we review in your AWS environment
Identity and access
AWS IAM and IAM Identity Center role policies, permission boundaries, and federation settings
Logging and monitoring
Coverage across AWS CloudTrail, Amazon CloudWatch, and Amazon GuardDuty to find detection blind spots
Configuration and compliance
Drift detection and rule coverage in AWS Config and AWS Security Hub
Data protection
Encryption and classification posture in AWS Key Management Service and Amazon Macie
Multi-account guardrails
Organizational policy and baseline review in AWS Organizations and AWS Control Tower
How the engagement runs
1 · Request and scope
Request the assessment through the contact form. We confirm which accounts and Regions are in scope.
2 · Grant read-only access
You create a scoped IAM role. No agents are deployed and no write permissions are requested.
3 · Two-hour working session
A remote session reviewing findings with your team as they surface, so context is captured live.
4 · Written summary
Prioritized findings and a remediation roadmap delivered within ten business days.
What you receive
- Prioritized findings summary, each rated by risk severity
- Findings mapped to the AWS Well-Architected Framework security pillar
- Remediation roadmap you can execute in-house or with follow-on services
Sample findings summary
See the format, severity ratings, and remediation table before you book.
Delivered by
- CISSP with a governance, risk, and compliance specialization
- Active U.S. SECRET clearance
- 18 years leading engineering, product, and security at global communications providers
- Built a complete security and IT program for ~275 employees across four countries after an acquisition
- Hands-on ISO/IEC 27001, ISO/IEC 42001, NIST AI RMF, and CMMC 2.0 implementation experience
- AWS practitioner since 2011 and former AWS Partner Program administrator
Why an independent read matters
Internal teams build and operate the environment daily, which makes configuration drift, overly permissive policies, and monitoring gaps easy to overlook. An outside review surfaces what familiarity obscures, and gives you a third-party perspective you can put in front of leadership, auditors, or the board.
Contact
Every engagement is delivered personally by Brian Govanlu, CISSP.
Readiness and advisory, not certification
Engagements are readiness and advisory services; they do not constitute certification, which must be performed by an accredited body.
Any AWS infrastructure costs you incur remain your responsibility and are separate from the engagement fee.
Professional services are separate from the CMDash auditor and assessor directory. How that directory stays neutral is set out in the Independence Covenant.