Security Finding — Regulatory Impact
Technical finding mapped to European regulatory requirements
Unencrypted database backup exposed
F-001
Description
A production database backup was identified without encryption in object storage. This configuration creates direct regulatory exposure under multiple European frameworks.
Affected asset
db-prod-001
Cloud environment
AWS (EU region)
Regulatory Impact Mapping
This technical finding maps directly to the following European regulatory requirements:
GDPRISO 27001NIS2
Observed Evidence (Simulated)
Detection timestamp
15 Jan 2026, 10:30
Processing region (EU)
eu-west-1
Data scope: Potential personal data
Related Regulatory Findings
Cross-region data replication detected
Related data exposure risk
Critical
Missing data residency controls
Similar data governance issue
High
Backup data retained outside policy limits
Related data retention concern
High
Public S3 bucket misconfiguration
Related storage security issue
Medium