Frameworks supported - AWS Control Tower
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

Frameworks supported

The controls available in Control Catalog support several industry frameworks.

  • ACSC-Essential-Eight-Nov-2022

  • ACSC-ISM-02-Mar-2023

  • AWS-WAF-v10

  • CCCS-Medium-Cloud-Control-May-2019

  • CIS-AWS-Benchmark-v1.2

  • CIS-AWS-Benchmark-v1.3

  • CIS-AWS-Benchmark-v1.4

  • CIS-v7.1

  • CIS-v8.0

  • FedRAMP-r4

  • ISO-IEC-27001:2013-Annex-A

  • NIST-CSF-v1.1

  • NIST-SP-800-171-r2

  • NIST-SP-800-53-r5

  • PCI-DSS-v3.2.1

  • PCI-DSS-v4.0

  • SSAE-18-SOC-2-Oct-2023

For more information, see the Control Catalog Ontology overview.