AWS Renews ProcessUnity Risk Exchange Assessment for Third-Party Due Diligence

Summary
AWS says it renewed its ProcessUnity Global Risk Exchange assessment. The assessment uses annually validated security-posture information, dynamic vendor profiles and framework mappings to support customers’ third-party due diligence.
Key points
- AWS says it completed the ProcessUnity Global Risk Exchange assessment of its security posture; ProcessUnity assessors validate results annually.
- The assessment platform combines analytics, threat intelligence, risk models and vendor input, with profiles that update as risk levels and AWS's security posture evolve.
- Framework View maps AWS assessment controls to threat profiles, MITRE ATT&CK scenarios and standards including NIST 800-53, ISO 27001, PCI DSS and HIPAA.
- Customers can request the report through ProcessUnity Global Risk Exchange.
Article Details
- Event Type
- AWS announced renewal of its ProcessUnity Global Risk Exchange assessment.
- Impact
- The validated assessment helps customers conduct third-party due diligence on AWS. ProcessUnity assessors review and validate the assessment annually; the Global Risk Exchange provides continuously updated vendor profiles, and its Framework View maps AWS controls to threat profiles, MITRE ATT&CK scenarios, and compliance frameworks.
