When you visit the details page for a standard, you can view a list of security controls that apply to the standard.
For each control, the table displays the following information:
-
The control ID and title
-
The status of the control. For more information, see Evaluating compliance status and control status in Security Hub.
-
The severity assigned to the control
-
The number of failed checks out of the total number of checks. If applicable, the Failed checks column also lists the number of findings with a status of Unknown.
-
Whether the control supports custom parameters.
Security Hub updates the control statuses and security check count every 24 hours. A timestamp at the top of the page indicates when the control statuses and security check count were most recently updated. For more information, see Evaluating compliance status and control status in Security Hub.
For administrator accounts, the control statuses and number of security checks are aggregated across the administrator account and all member accounts. The count of enabled controls includes controls that are enabled in the standard in the administrator account or at least one member account. The count of disabled controls includes controls that are disabled in the standard in the administrator account and all member accounts.
By default, the table lists all enabled controls in the standard. Those with a Failed control status are shown at the top, sorted in order of decreasing severity.
You can filter the list of all controls in the standard. Using the Filter by options next to the table, you can choose to view only enabled or only disabled controls in the standard. If you view only enabled controls, you can further filter the list by control status. This lets you focus on controls with a specific control status.
In addition to the Filter by options, you can sort the controls lists by entering filters in the Filter controls search box. For example, you can filter by control ID or title.
Choose your preferred access method, and follow the steps to display the available controls for an enabled standard.
To view the controls for an enabled standard (console)
Open the AWS Security Hub console at https://console.aws.amazon.com/securityhub/
. -
Choose Security standards in the navigation pane.
-
Choose View results for a standard. The bottom of the page lists all of the controls that apply to the standard. Filter and sort the list as needed.
You can download the current page of the controls list to a .csv
file by choosing Download.
If you filter the controls list, then the downloaded file includes only the controls that match the filter settings.
