Cloud Security Controls Checker – CIS & SOC 2 Compliance

The Cloud Security Controls Compliance Checker provides engineering and compliance teams with a structured mechanism to verify cloud infrastructure readiness prior to formal audits. It systematically evaluates controls across the four core domains of the CIS Foundations Benchmarks: Identity and Access Management, Storage and Database Encryption, Logging and Monitoring, and Networking.

Users record the implementation status of each control, and the tool generates an interactive compliance readiness score, highlights critical non-conformities, and maps findings to SOC 2 Type II trust services criteria and ISO 27001 requirements.

The Center for Internet Security (CIS) defines two distinct implementation profiles for its Cloud Foundations Benchmarks: Level 1 and Level 2.

Level 1 controls are foundational recommendations that provide clear security benefits without severely impacting business agility or requiring significant operational overhead. Examples include enforcing MFA on all IAM users, disabling root access keys, and enabling multi-region CloudTrail. Level 2 controls represent deeper Defense-in-Depth recommendations intended for environments with sensitive data or strict compliance mandates, such as routing all VPC egress through dedicated inspection firewalls and enforcing hardware MFA tokens.