SIA Cloud Security Posture : 5 weeks assessment

Whether your organization is still in the Cloud migration process or there are already services in production, SIA CSPA will establish a Security program that allows you to start implementing robust Security mechanisms and maintain that high Security Posture Level. During this assessment, SIA Cloud Security Architects will analyze your Cloud Adoption Strategy in order to align and prioritize all the recommendations that the Security Action Plan will incluide. We will take interviews with key stakeholders (Business, IT and Security) with the main aim of deeply understand the objectives, expectatives and concerns of your journey to the Cloud. This Strategic Stage of the assessment will follow, as framework baseline, the Well-Architected Framework (WAF) of Microsoft Azure, adapted to you and from the SIA expertise perspective. Some of the key points that we address here are:

• Workloads & App/API protection
• DevSecOps
• Identity Sec
• Data Sec

Apart from that, SIA Cloud Security Specialists will work with your Cloud Admins on identifying technical misconfigurations present on the environments, which lead to security weaknesses that could be leveraged by attackers to compromise data and services hosted on your Azure environments. This analysis will be executed by activating and configuring CSPM module of Azure Security Center for you, that will allow us to identify any configuration that is not aligned with the Azure Security Benchmarks. The key point here is to be able to interpret and prioritize all technical remediations detected, in order to propose a customized mitigation plan that can be executed in an agile and automated way. SIA CSPA includes:

• Azure Security Center Activation
• Information Gathering (interviews, automated checks)
• Information Analysis
• AS-IS Report
• Action Plan report + Quick Fixes