The goals of the assessment are:

• Check the Azure environment security settings and controls
• Examine the environment and reveal any security gaps and issues
• Report on the finding and suggest improvements.

Our assessment framework consists of four phases:

1. Information gathering. The DataArt’s cloud security assessment team reviews and analyzes clients’ security-related documentation to identify the architecture of the cloud, the types of deployed services, and the security controls used as well as the key people and processes
2. Interviews. DataArt arranges interviews with the key people responsible for the cloud: network engineers, technical architects, leads of support and maintenance teams, security, and compliance officers
3. Manual and automated assessment. Our experts perform an automated assessment of the cloud infrastructure to validate the existing security controls. The assessment team also inspects and analyzes the whole setup manually, either via a web console or cloud-provided APIs
4. Reporting. At the final step of the assessment, we collaborate with a client’s cloud team on disputable findings and create an assessment report which includes the executive summary section, description of methodology, definition of assessment scope, prioritized overview of issues, and recommendations on how to use Microsoft services.

The average cloud security assessment performed by DataArt is completed within 1-3 weeks. The timeline may depend on a project scope.

Deliverables:

• Find non-addressed security gaps and issues
• Verify that security controls are implemented in line with industry best practices and a company’s policy
• Plan against the possibility of an outage from Azure
• Improve the security position and follow the compliance rules.

Contact us today to learn more!