Securing Amazon Web Services

Issue 8 2021 Information Security, Infrastructure, Commercial (Industry)

Sophos has unveiled advancements to Sophos Cloud Optix that automate and simplify the detection and response of security incidents across Amazon Web Services (AWS) infrastructure.

Powered by new machine learning models from SophosAI, the Sophos Cloud Optix cloud security posture management solution now continuously analyses AWS CloudTrail to build a picture of individual user activity. It brings AWS CloudTrail events to life in a clear and detailed timeline view of user activities, high risk anomalies and security and compliance incidents across all AWS accounts with remediation guidance for security teams.

“Sorting through and making sense of potentially thousands of user activity events to identify suspicious activity used to be near impossible,” said Scott Barlow, Sophos vice president of global MSP and cloud alliances. “Sophos is transforming this resource intensive process, giving security teams the answers they need with the click of a button. Security teams can instantly pinpoint unusual activity – such as actions not previously taken by a user or actions being performed outside of normal business hours, for example – and focus their investigations on the most high-risk alerts with confidence.”

Accelerate with AWS, Secure with Cloud Optix

Sophos Cloud Optix provides visibility into risky blind spots. It secures AWS and other cloud workloads against advanced threats and cloud environment misconfigurations and is easily managed in the cloud-based Sophos Central platform alongside Sophos’ portfolio of next-generation cybersecurity solutions and services.

Cloud Optix offers extensive AWS security service integrations, including integration with the new Amazon Inspector. Cloud Optix also integrates with AWS Security Hub, Amazon GuardDuty, AWS CloudTrail, Amazon Macie, AWS Systems Manager and Patch Manager, AWS Firewall Manager, AWS IAM Access Analyzer, Amazon Detective and Amazon Elastic File System.

Share this article:

Industry perspective on industrial cybersecurity
Technews Publishing News & Events Infrastructure Industrial (Industry)
The Industrial Security Harmonization Group has released a joint industry perspective highlighting a critical truth in industrial cybersecurity: secure communication is not determined by protocols alone, but by how they are deployed and managed in real-world environments.

Read more...

Cyber resilience is the real defence
Security Services & Risk Management Information Security Infrastructure
Cyber resilience has evolved into a form of strategic agility, ensuring that when an interruption occurs, the business does not just survive; it snaps back into place before the market even notices a pause.

Read more...

You will not get your files back with VECT
Information Security
If the newbie to the ransomware scene, VECT, comes knocking at your organisation’s door, do not pay the ransom! The decryption keys simply do not exist. They were discarded at the moment of encryption by the malware itself.

Read more...

Industrial sector is a primary cyber target
Information Security
Threats in industrial environments are distributed with striking uniformity: APT-driven incidents constitute 17,8%, malware 14,9% and social engineering 13,9%. This pattern suggests that industrial organisations attract a broad range of adversaries with different capabilities and objectives.

Read more...

Key attributes of an effective cybersecurity leader
BlueVision Information Security
In an evolving technology landscape, an effective cyber leader must combine technical acumen, foresight, and adaptive leadership to mitigate risks, and risks can only be mitigated once accurately identified and remedial processes are in place.

Read more...

Employees are SA’s biggest cyber threat
Security Services & Risk Management Information Security
South Africa experienced a 46% increase in insider cyber risk in 2026, surpassing the global average of 44%. What is more, 63% of South African companies surveyed expect insider-driven data losses to increase.

Read more...

Power, performance and profit
Power Management Infrastructure
Electricity remains the single largest operating cost for most data centres. In many African markets, power infrastructure is ageing or inconsistent, forcing operators to rely on backup generation to keep facilities online.

Read more...

Surge in AI-enabled cybercrime and a 389% increase in ransomware
News & Events Information Security
Cybercrime no longer functions as a series of isolated campaigns; it operates as a system, with malicious hackers operating across an end-to-end life cycle and compressing the attack life cycle with shadow agents.

Read more...

Categories

Securing Amazon Web Services

Further reading:

Published by Technews