Governance
Assigning owners to cloud accounts and workloads
Map cloud account and workload owners to decision rights, daily operations, budget contacts and escalation routes.
Desk
Desk Cloud Governance
Looks at access controls, security operations and due diligence on cloud providers.
Governance
Checking data export and exit options before procurement
Check export methods, formats, access windows, charges and deletion terms before committing data to a cloud supplier.
Identity
Cloud identity and access
Plan cloud access for staff, administrators and workloads with narrow permissions, protected sign-in and a reviewable removal process.
Governance
Cloud operations governance
Set up cloud operations governance with clear workload ownership, operating rules, evidence reviews and a way to resolve exceptions.
Governance
Cloud security operations
Assign owners and evidence for exposure changes, cloud server updates, deployment secrets and suspected account compromise.
Governance
Cloud vendor due diligence
Assess cloud service terms, support, data handling, exit routes and feature readiness before approving a vendor arrangement.
Identity
Comparing public and private application access
Public and private access describe the network path to an application, not whether its users are trusted.
Migration
AWS, Azure and GCP support plans against operational needs
Compare AWS, Azure and Google Cloud support by severity, initial response, hours, escalation and the work your team must do.
Identity
Designing roles with the minimum required permissions
Build cloud roles from required tasks, resource scope and duration, then check the grant and its holder's other access.
Cloud Planning
Distinguishing a roadmap promise from an available cloud feature
Verify whether a promised cloud feature is released, supported and usable in the intended region, plan and account.
Identity
Escalating a suspected cloud account compromise
Handoff a suspected cloud account compromise, preserve available evidence and coordinate containment and reporting decisions.
Identity
Keeping secrets out of deployment files: checks & response
Keep credential values out of deployment files, review leak paths and respond if a real secret is committed.
Identity
Managing service identities separately from employee access
Give applications owned identities, choose supported authentication, limit runtime access and retire identities with their workloads.
Governance
Recording infrastructure changes in version control
Trace cloud infrastructure changes through configuration review, current plans and deployment records while protecting state and secrets.
Identity
Removing dormant credentials from cloud environments
Find cloud credentials that appear unused, check dependencies, disable and observe them, then delete confirmed dormant credentials.
Identity
Reviewing privileged cloud accounts
Identify privileged cloud grants, confirm each business need and close retain, reduce or remove decisions with platform limits in view.
Governance
Reviewing cloud service commitments before procurement
Read a cloud SLA's coverage, conditions, exclusions, credits and claim process before signing a service agreement.