MBSS (Minimum Baseline Security Standards) Compliance defines the minimum required security controls that every system, cloud account, application, or infrastructure must comply with. It functions as a baseline security framework covering IAM, networking, logging, encryption, monitoring, and vulnerability management.
MBSS is similar in spirit to CIS Benchmarks, NIST 800-53, or ISO 27001 Annex A controls — but is typically customised per organisation.
MBSS represents the baseline operational and security controls needed to ensure cloud accounts meet a minimum safe configuration. MCM enforces these controls through the combination of Cloud Custodian (cloud-level configuration policies) and Wazuh (host-level and runtime compliance checks).
