AWS Security Hub CSPM now supports the Cyber Risk Institute profile version 2.2
AWS Security Hub ยท 2026-10-15
Actions
Technical Details
| Regions | all, AWS GovCloud (US), China Regions |
|---|---|
| Cost Impact | Neutral |
What This Means
For DevOps Teams
Configure Security Hub CSPM to adopt the CRI Profile v2.2, ensuring your security checks are aligned with the latest financial sector cybersecurity standards without requiring manual checks for unsupported requirements.
For Platform Teams
Integrate the CRI Profile v2.2 into your Security Hub CSPM deployment to enhance your organization's cybersecurity posture, leveraging automated checks that align with financial sector regulations.
For Executives
Evaluate enabling the CRI Profile v2.2 in Security Hub CSPM to align with financial sector cybersecurity regulations, reducing the need for multiple assessments and enhancing compliance reporting efficiency across your organization's accounts and regions.
Source
Related AWS Security Hub Updates
- AWS Security Hub now supports resource criticality for prioritization (2026-10-14)
- AWS Security Hub now exports findings to S3 in CSV or JSON format (2026-10-09)
- GuardDuty Runtime Monitoring is now included in the AWS Security Hub Threat Analytics plan (2026-10-02)
- AWS Security Hub introduces remediation plans to prioritize and fix security exposures (2026-10-01)
- CVE-2026-97662 - Argument injection in AWS security-agent-mcp-server diff scan (2026-10-01)