How NatWest uses AWS services to manage vulnerabilities at scale
summary
NatWest adopts AWS Security Hub and Amazon Inspector, enabling centralized findings via EventBridge and automated responses with Lambda and Systems Manager runbooks; hybrid Inspector scanning (agent + agentless) reaches 98% coverage and consolidated findings plus automation rules cut noise and speed remediation. Deployment across hundreds of accounts completes in 30 days to implement during trial, yields about a ~10% cost reduction, leverages 100+ automated runbooks and QuickSight dashboards, and proves effective at shifting remediation to application teams.
AI-written summary · about
chapters (7)
- 0:00Introduction to vulnerabilities
- 3:44Security Hub overview
- 11:10Amazon Inspector capabilities
- 13:56NatWest journey and challenges
- 26:48Implementation and results
- 33:30Managing findings at scale
- 43:27AWS guidance and best practices
related talks
21mAWS On Air ft. Amazon Inspector
01h 00mVulnerability management at scale drives enterprise transformation
46mHow Nubank Automates Security on AWS
47mCentralizing security at scale w/ Security Hub & Intuit’s experience
20mBuilding secure AWS app workloads using automated best practices
34mLayering AWS security services to automate incident response
35mThe Good, the Bad and the Ugly — one year of integrating AWS security services
32mAdvanced threat detection and response on AWS