lacework-global-32
Register security contact information (Manual)
Profile Applicability
• Level 1
Description
AWS provides customers with the option of specifying the contact information for account's security team. Best practices recommend providing this information.
Rationale
Specifying security-specific contact information will help ensure that security advisories sent by AWS reach the team in your organization that is best equipped to respond to them.
Audit
Perform the following to determine if security contact information is present:
From Console
- Click on your account name at the top right corner of the console
- From the drop-down menu Click
My Account
- Scroll down to the
Alternate Contacts
section - Ensure contact information is specified in the
Security
section
Remediation
Perform the following to establish security contact information:
From Console
- Click your username at the top right corner of the console.
- From the drop-down menu click
Account
. - Scroll down to the
Alternate Contacts
section. - Enter contact information in the
Security
section.
note
Consider specifying an internal email distribution list to ensure emails are regularly monitored by more than one individual.
References
CCE-79200-2