Cloud Security Controls Audit

Our Cloud Security Controls audit service assesses your cloud environment(s) and the baseline controls currently in place against the Cloud Security Alliance’s (CSA’s) Cloud Controls Matrix. From here our consultants provide prioritised advice for any control gaps or mitigation(s) required, that are relevant to your organisation and in the context of your unique business operations, risk appetite, risk profile and resources available.

Our Cloud Security Controls audits highlight any potential issues within the following security domains;

• Audit & Assurance – A&A
• Application & Interface Security – AIS
• Business Continuity Management and Operational Resilience – BCR
• Change Control and Configuration Management – CCC
• Cryptography, Encryption & Key Management – CEK
• Datacenter Security – DCS
• Data Security and Privacy Lifecycle Management – DSP
• Governance, Risk and Compliance – GRC
• Human Resources – HRS
• Identity & Access Management – IAM
• Interoperability & Portability – IPY
• Infrastructure & Virtualization Security – IVS
• Logging and Monitoring – LOG
• Security Incident Management, E-Discovery, & Cloud Forensics – SEF
• Supply Chain Management, Transparency, and Accountability – STA
• Threat & Vulnerability Management – TVM
• Universal Endpoint Management – UEM

Our consultants will guide you through best practise, their own individual experience, system nuances and tailor recommendations and mitigations while maintaining security to your own individual organisational needs.