# AWS adds 404 security controls aligned with financial-sector CRI framework

_Published Thursday, October 15, 2026 at 11:19 AM EDT · Security · Latest · Tier 2 — Notable_

AWS has added 404 controls to Security Hub CSPM that automate security checks supporting a subset of Cyber Risk Institute Profile v2.2 requirements. The framework combines cybersecurity and regulatory expectations for financial services, allowing organizations to assess themselves once and report against multiple regulations.

The standard is available wherever Security Hub CSPM operates, including AWS GovCloud (US) and China Regions. Administrators can enable it across selected accounts and linked Regions through central configuration. The controls do not cover requirements that need manual checks.

## Sources

- [Recent Announcements](https://aws.amazon.com/about-aws/whats-new/2026/10/security-hub-cspm-cri-profile-v22/)

---
Canonical: https://techandbusiness.org/newswire/JSkVs7MvjmLQ9MgpscwIAv
Published: 2026-10-15T15:19:35.373Z
Story chronology: 2026-10-15T08:00:00.000Z
Retrieved: 2026-10-15T17:40:32.113Z
Publisher: Tech & Business (techandbusiness.org)