The AC, AU, CM, IA, SC and SI families of NIST SP 800-53 rev. 5 cover access, audit, configuration, identification, communications protection and integrity. Ctadel checks them on your clouds and cites the control on every finding.
Access control and least privilege (AC), logging (AU), configuration (CM), identification and authentication (IA), communications protection and encryption (SC), integrity and vulnerabilities (SI).
CSV export of findings with their references, history, audit log.
Every rule in the catalogue cites the controls of the frameworks it covers. Those references appear in the detail panel of each finding and export with them. Reports per framework are under internal validation; Ctadel claims no certification for itself.
The online demonstration is open to all, on fictitious data. For an instance on your own accounts, request a demonstration.