Spring 2026 SOC 1 and 2 reports are now available in OSCAL format
AWS now publishes SOC 1 and SOC 2 reports in machine-readable OSCAL format, enabling automated ingestion into GRC platforms and reducing the manual effort of continuous cloud-provider assurance reviews.
Summary written by editorial AI · Source link below
Amazon Web Services (AWS) is excited to release the Spring 2026 System and Organization Controls (SOC) 1 and 2 reports in machine-readable OSCAL format alongside the PDF version of the reports. The reports cover 188 services over the 12-month period from April 1, 2025 to March 31, 2026, giving customers a full year of assurance. […]
Editorial Analysis
Machine-readable audit reports let compliance teams automate evidence collection against NIS2 and DORA supply-chain assurance requirements instead of manually reviewing 188-service PDF reports each cycle.
Update your GRC tooling to ingest OSCAL-formatted SOC reports from AWS and map findings to your existing control frameworks for continuous assurance.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at AWS Security Blog in a new tab.
More from the Compliance Desk
- Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads2d
- 23andMe successor settles with California for $6 million over cybersecurity failings6d
- WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators6d
- Provable Compliance: A Protocol for Runtime Compliance Evidence and Transaction-Specific Decisioning19 Oct
- SoK: Failure Modes in Common Criteria Product Evaluation - A Taxonomy and Design-for-Evaluability Guidance9 Oct