2025 Regulatory Summit

CLOUD FOUNDATIONS FOR FINANCIAL SERVICES FINANCIAL SERVICES |

AWS enables cloud compliance and assurance

Assurance of Risk Management

Manage Risk

Oversee Risk

AWS CloudTrail

AWS Config

AWS Audit Manager

AWS Security Hub

AWS License Manager

AWS Systems Manager

AWS Control Tower

Amazon CloudWatch

AWS Artifact

AWS Well-Architected Framework

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark.

CLOUD FOUNDATIONS FOR FINANCIAL SERVICES FINANCIAL SERVICES |

Business Continuity and Disaster Recovery Requirements may include: Maintaining backup and recovery capabilities sufficiently resilient and geographically diverse and that are reasonably designed to achieve next business day resumption of business and few hours resumption of critical systems following a wide-scale disruption

Customer Samples of Processes/Controls

Business Continuity and Resilience Coordinated BC/DR testing Backup Management

ENABLERS

Critical Component Replication AWSCA-10.1: Critical AWS system components are replicated across multiple Availability Zones and backups are maintained. Contingency Planning and Incident Response Playbooks AWSCA-10.3: AWS contingency planning and incident response playbooks are maintained and updated to reflect emerging continuity risks and lessons learned from past incidents. The AWS contingency plan is tested on at least an annual basis.

AWS Samples of AWS Managed Controls

18

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark.