Cloud Security Assessment Service

Cloud Configuration Review

The Cloud Configuration Review identifies Cloud configuration weaknesses and common misconfigurations to provide tailored guidance on areas of Cloud security improvement. The consultant will review your Cloud environment and applications against industry benchmarks, such as the CIS Cloud benchmarks, and validate any security measures in place. It includes:

• Expert review of your Cloud environment and advice on areas of Cloud security improvement;
• Review of your Cloud security controls against industry standard and proprietary benchmarks;
• Examination of your Cloud environment for security configuration gaps;
• Review of the effectiveness of your perimeter controls (security croups, network ACLs, firewalls);
• Evaluation of the security controls in place for your applications; and
• A written report providing recommendations and remedial action to improve your security posture.

Cloud Security Maturity Assessment

A maturing approach to Cloud security will help embed data security and reinforce good practices. This service assesses your progress against key maturity measures based on well-known industry benchmarks such as the CSA (Cloud Security Alliance) CCM (Cloud Controls Matrix), CIS Cloud benchmarks, ISO standards and SANS best practice to fit your needs. This will help you:

• Assess your organisation’s security maturity by benchmarking current controls and practices against leading methods and standards;
• Determine your current security posture;
• Assess gaps in current capabilities that may weaken Cloud security, and recommend technology and services to address them;
• Identify shortcomings in your organisation’s overall readiness to repel a cyber attack on your Cloud environment;
• Identify areas for remediation and create a roadmap of prioritised remediation activities to improve the maturity of your security programme; and
• Demonstrate both corporate and operational compliance.

For more information, download the service description.

Who is this service for?

Cloud security services can be delivered to organisations of any size, and in any sector or industry. Our consultants are CCSPs (Certified Cloud Security Professionals), CSA-certified experts, and qualified AWS, Azure and GCP architects and practitioners.