Blockchain/Web3 Startup Blocks Gaps and Improves AWS Security Posture

Solution

Protiviti leveraged AWS Security Hub, a native AWS solution that can be set up quickly, to assess the environment’s configuration posture. Using AWS Security Hub, the team was able to identify configurations that had deviated from the baseline control and used Amazon CloudWatch to alert on those findings.

The Protiviti team also leveraged IAM Access Analyzer and IAM Access Advisor to identify excessive permissions to remediate any issues caused. And they evaluated, set up and operationalized processes associated with AWS KMS, Amazon Inspector, and Amazon Macie.

In addition, the Protiviti team architected and developed a notification mechanism to automatically deliver notifications to the appropriate parties when Security Hub discovers a new security event. We developed a new process and playbook that details the appropriate actions to take given certain types of security events. Lastly, the team conducted training sessions and shadow sessions with the client’s project managers to ensure a smooth transition into operation.

Outcome

Protiviti successfully stood up AWS Security Hub for the client, customizing the foundational security leading practice controls to fit the client’s needs, and producing a baseline finding report, enabling the client to quickly remediate all issues. In the process, Protiviti helped the client identify more than 50 security risks in their AWS environment and develop appropriate action plans to remediate them.

The notification automation, combined with the detailed playbook, empowers the client to consistently monitor their AWS environment while coordinating across the enterprise to quickly remediate any new security findings.