CLOUD Live
Cloud Security Maturity Model
Foundational AWS cloud security controls, organized by security domain across four maturity phases.
Quick Wins → Foundational → Efficient → Optimized
Open edition → PCI Live
PCI DSS Security Maturity Model
Payment card security controls mapped to PCI DSS requirements for teams building cardholder data environments on AWS.
Structured by PCI DSS requirement across maturity phases
Open edition → AI Live
AI Security Maturity Model
Security controls for generative and agentic AI workloads on AWS, mapped to OWASP LLM Top 10 and NIST AI RMF.
Capabilities × tactical controls across maturity phases
Open edition → One model, three editions
Phased by design
Every edition organizes controls into maturity phases so teams can start with quick wins and progress deliberately, never starting over.
Framework-aligned
Controls map to established frameworks — AWS CAF and Well-Architected, PCI DSS, OWASP LLM Top 10, and NIST — so the guidance is traceable.
Actionable on AWS
Each control pairs the "why" with practical AWS implementation guidance, validation checks, and a self-assessment you can track locally.