Cloud Security Strategy

You might have heard that Cloud Security is impossible to get right, or that someone have tried selling you a ‘silver bullet’ product. The truth is that you can spend as much energy and money as you want on Cloud Security, and there will still be a residual risk. Few companies exist only to do Cloud Security; more likely, your company is serving customers or its purpose doing something else, such as selling products, providing services, or manufacturing. Our strategy starts with understanding your business and business strategy, your technology strategy or goals, and your risk appetite. Followed by that, we map out your current capability maturity level within Cloud Security. We then start putting the pieces together, forming your Cloud Security Strategy that supports and enables your business strategy.

The service normally includes:

• Workshop/meetings to understand your business and IT strategy
• Mapping out your current maturity level by looking at technology, processes, and people
• Gap analysis against recognized frameworks
• Presenting our findings so far (high-level)
• Calculating where we can reduce risk most effectively, usually looking at cost, complexity, and man-hours needed
• Finalizing the Cloud Security Strategy
• Presenting the current status and suggested plan/roadmap for the business