TrendAI Vision One™ – Cloud Risk Management provides a number of tools to help organizations quickly assess their infrastructure’s
compliance posture against various compliance standards and frameworks:
Compliance tools:
Procedure
- Standard and Framework checks report - view how your organization’s infrastructure is tracking against rules filter by various Standards and Frameworks
- Compliance and Cloud Risk Management Reports - view and download a report assessing how your cloud infrastructure security and governance posture is tracking against controls from various Standards and Frameworks.
- Compliance Excel Report - Downloadable Excel report of your infrastructure’s compliance posture.
- Compliance Score – health metric of your cloud infrastructure measured against Cloud Risk Management’s entire 1,100+ rule set.
Supported Standards and Frameworks 
Cloud Risk Management currently offers reports for the following standards and frameworks. Each standard
or framework is made up of controls that specify security and governance requirements.
Cloud Risk Management
rules are mapped to these controls and the resulting checks can be filtered to display only the rules relevant to a particular standard or framework.
|
Standard or Framework
|
|||
| AWS Well-Architected Framework (Mar 2025) |
 |
|
|
| AWS Well-Architected Framework Generative AI Lens (Nov 2025) |
|
|
|
| AWS Well-Architected Framework Machine Learning Lens (Nov 2025) |
|
|
|
| AWS Security Reference Architecture (Dec 2025) |
|
|
|
| AWS Security Reference Architecture for AI (Dec 2025) |
|
|
|
| Microsoft Azure Well-Architected Framework (Mar 2026) |
|
|
|
| Google Cloud Well-Architected Framework (Jan 2026) |
|
|
|
| Oracle Cloud Infrastructure Well-Architected Framework (May 2025) |
|
|
|
| CIS Amazon Web Services Foundations Benchmark (v3.0.0) (Deprecated) |
|
|
|
| CIS Amazon Web Services Foundations Benchmark (v4.0.1) (Deprecated) |
|
|
|
| CIS Amazon Web Services Foundations Benchmark v5.0.0 (Deprecated) |
|
|
|
| CIS Amazon Web Services Foundations Benchmark (v6.0.0) |
|
|
|
| CIS Amazon Web Services Foundations Benchmark (v7.0.0) |
|
|
|
| CIS Microsoft Azure Foundations Benchmark (v2.1.0) (Deprecated) |
|
|
|
| CIS Microsoft Azure Foundations Benchmark (v2.1.0) (Deprecated) |
|
|
|
| CIS Microsoft Azure Foundations Benchmark (v3.0.0) (Deprecated) |
|
|
|
| CIS Microsoft Azure Foundations Benchmark (v4.0.0) |
|
|
|
| CIS Microsoft Azure Foundations Benchmark (v5.0.0) |
|
|
|
| CIS Google Cloud Platform Foundation Benchmark (v3.0.0) |
|
|
|
| CIS Google Cloud Platform Foundation Benchmark (v4.0.0) |
|
|
|
| CIS Alibaba Cloud Foundation Benchmark (v1.0.0) |
|
|
|
| CIS Alibaba Cloud Foundation Benchmark (v2.0.0) |
|
|
|
| CIS Oracle Cloud Infrastructure Foundations Benchmark (v3.0.0) |
|
|
|
| CIS Oracle Cloud Infrastructure Foundations Benchmark (v3.1.0) |
|
|
|
| CIS Critical Security Controls (v8) |
|
|
|
| CIS Critical Security Controls (v8.1) |
|
|
|
| NIST SP 800-53 (Rev 4) |
|
|
|
| NIST SP 800-53 (Rev 5) |
|
|
|
| System and Organization Controls 2 (SOC 2) (Nov 2019) |
|
|
|
| NIST Cybersecurity Framework (v1.1) |
|
|
|
| NIST Cybersecurity Framework (v2.0) |
|
|
|
| ISO/IEC 27001 (2013) |
|
|
|
| ISO/IEC 27001 (2022) |
|
|
|
| ASD Information Security Manual (Sep 2024) |
|
|
|
| HIPAA (Feb 2023) |
|
|
|
| HITRUST CSF (v11.3.0) |
|
|
|
| AUASB ASAE 3150 Assurance Engagements on Controls (Sep 2022) |
|
|
|
| PCI Data Security Standard (v3.2.1) |
|
|
|
| PCI Data Security Standard (v4.0.1) |
|
|
|
| APRA Prudent Standard CPS 234 Information Security (Jul 2019) |
|
|
|
| FEDRAMP (Rev 4) |
|
|
|
| MAS Technology Risk Management Guidelines (Jan 2021) |
|
|
|
| General Data Protection Regulation (GDPR) (May 2018) |
|
|
|
| NIS 2 Directive (v2) |
|
|
|
| FISC Security Guidelines on Computer Systems for Financial Institutions (v12) |
|
|
|
| KISA ISMS-P (Nov 2023) |
|
|
|
| LGPD (Sep 2020) |
|
|
Standard and Framework checks report
Procedure
- Open All checks report
- Select View by Rule
- Expand Filter checks
- Check a standard or framework in Standards & Frameworks. Example: MAS Technology Risk Management Guidelines (Jan 2021)TrendAI Vision One™ currently supports the following Standards & Framework filters:
-
AWS Well-Architected Framework (Mar 2025)
-
AWS Well-Architected Framework Generative AI Lens (Nov 2025)
-
AWS Well-Architected Framework Machine Learning Lens (Nov 2025)
-
AWS Security Reference Architecture (Dec 2025)
-
AWS Security Reference Architecture for AI (Dec 2025)
-
Microsoft Azure Well-Architected Framework (Mar 2026)
-
Google Cloud Well-Architected Framework (Jan 2026)
-
Oracle Cloud Infrastructure Well-Architected Framework (May 2025)
-
CIS Amazon Web Services Foundations Benchmark (v3.0.0) (Deprecated)
-
CIS Amazon Web Services Foundations Benchmark (v4.0.1) (Deprecated)
-
CIS Amazon Web Services Foundations Benchmark (v5.0.0) (Deprecated)
-
CIS Amazon Web Services Foundations Benchmark (v6.0.0)
-
CIS Amazon Web Services Foundations Benchmark (v7.0.0)
-
CIS Microsoft Azure Foundations Benchmark (v2.1.0) (Deprecated)
-
CIS Microsoft Azure Foundations Benchmark (v3.0.0) (Deprecated)
-
CIS Microsoft Azure Foundations Benchmark (v4.0.0)
-
CIS Microsoft Azure Foundations Benchmark (v5.0.0)
-
CIS Google Cloud Platform Foundations Benchmark (v3.0.0)
-
CIS Google Cloud Platform Foundation Benchmark (v4.0.0)
-
CIS Alibaba Foundations Benchmark (v1.0.0)
-
CIS Alibaba Foundations Benchmark (v2.0.0)
-
CIS Oracle Cloud Infrastructure Foundations Benchmark (v3.0.0)
-
CIS Oracle Cloud Infrastructure Foundation Benchmark (v3.1.0)
-
CIS Critical Security Controls (v8)
-
CIS Critical Security Controls (v8.1)
-
NIST SP 800-53 (Rev 4)
-
NIST SP 800-53 (Rev 5)
-
System and Organization Controls (SOC 2) (Nov 2019)
-
NIST Cybersecurity Framework (v1.1)
-
NIST Cybersecurity Framework (v2.0)
-
ISO/IEC 27001 (2013)
-
ISO/IEC 27001 (2022)
-
ASD Information Security Manual (Sep 2024)
-
HIPAA (Feb 2023)
-
HITRUST CSF (v11.3.0)
-
AUASB ASAE 3150 Assurance Engagements on Controls (Sep 2022)
-
PCI Data Security Standard (v3.2.1)
-
PCI Data Security Standard (v4.0.1)
-
APRA Prudential Standard CPS 234 Information Security (Jul 2019)
-
FEDRAMP (Rev 4)
-
MAS Technology Risk Management Guidelines (Jan 2021)
-
General Data Protection Regulation (GDPR) (May 2018)
-
NIS 2 Directive (v2)
-
FISC Security Guidelines on Computer Systems for Financial Institutions (v12)
-
KISA ISMS-P (Nov 2023)
-
LGPD (Sep 2020)
-
- Scroll down to the checks list, which displays the standard or framework selected. Click on a rule to see the check result (success or failure) against the rule for each resource. See Rules for more info.
- To save a copy, download the result as a PDF or CSV report.
-
Generate and download new Standard & Framework Checks results.
-
Click Generate report.
-
-
Download previously generated reports from the history.
-
Expand Other reports from the Configured reports list.
-
Select either CSV or PDF format for the report.
-
Note
Standard & Framework checks reports can also be downloaded from the All Generated Reports list. To learn more about standards in a particular Standard & Framework report, visit the vendor or authority's website to register and access a detailed PDF about the standards. -
CIS Foundations Benchmarks
Not all recommendations from the CIS Benchmarks have been applied. Please refer to
the CIS website to access the free CIS Benchmarks PDFs for more details on the recommended settings.
Compliance Excel Report
A Compliance Excel Report is mapped in the same way as a Compliance & Cloud Risk Management Report but is available in XLS format. You can choose English or Japanese as the output
language. Currently, only the following CIS Foundations Benchmarks are supported:
-
CIS Amazon Web Services Foundations Benchmark
-
CIS Microsoft Azure Foundations Benchmark
-
CIS Google Cloud Platform Foundations Benchmark
-
CIS Alibaba Cloud Foundations Benchmark
-
CIS Oracle Cloud Infrastructure Foundations Benchmark
Example CIS AWS Foundations report
