2026-07-24 · aws-security
AWS Security announced refreshed 2026 ISO and CSA STAR certifications with two additional services added to scope. While this is not a breach story, it is still directly relevant to resilience planning because the standards involved cover information security, cloud security, privacy, service management, and business continuity. For organizations thinking seriously about cold storage and recovery, this kind of post is a reminder that data protection is not just about having backups. It is also about being able to prove controls, retention discipline, and continuity readiness before an outage, ransomware event, or destructive attack turns paperwork into a real operational test.
AWS said it completed an onboarding audit with no findings across multiple ISO standards and CSA STAR CCM v4.0, and reissued the certificates with two more services in scope. The post also points customers to AWS Artifact as the place to retrieve the underlying compliance documents.
When an incident hits, weak evidence of controls can slow recovery almost as much as the technical damage itself. If teams cannot quickly show what was protected, retained, or recoverable, legal exposure, audit friction, and prolonged downtime can pile onto the direct impact of lost or corrupted data.
Cold storage supports the same discipline these certifications are meant to validate: separation, continuity, and recoverability under stress. Offline backups and archived recovery artifacts give organizations something provably untouched to restore from when live environments, online snapshots, or administrative controls are no longer trustworthy.
Read Original Post →