Devoteam A Cloud Consulting Offer
Co-build with all your ecosystem’s cloud stakeholders a Cloud Security Strategy adapted to your risk management policy, regulatory requirements of your business sector and agility needs of your Business IT organisation.
Starter Package Deliverables (up to 6 weeks)
- Assessment of your Cloud Security (CS) maturity level
- Presentation of CS roadmap & projects of similar actors
- Materials to increase cloud security awareness of your C-level management, IT & Business actors
- Annual / triennial CS roadmap: themes, actions, stakeholders, prerequisites, loads – aligned with global security strategy and IT / Business roadmaps
- 1-5 ‘CS roadmap’ follow-up KPI
Customer Contribution
- Identification of key stakeholders (operational and decision-makers) and assurance of their availability for security workshop
- Collection of technical, functional and organizational reference documents about security and cloud: global security / risk management policy and roadmap, data classification matrix, security and IT cloud policy and standards, cloud roadmap and global architecture, organization chart
- Requirements to build cloud security KPIs
Key Activities
Scoping: Confirmation of project targets, overview of cloud & global security state of work, high level assessment of Cloud security maturity (on technical and functional axis), inventory of internal / regulatory requirements.
1-2 workshops to initialize the CS roadmap: Presentation of similar CS roadmaps, 1st proposal based on security teams priorities (process, operating models, tools), disposal to implement and follow-up the roadmap, project key success factors, com. plan.
2-X workshops to co-build the CS roadmap with IT teams (cloud architects, DevOps, SRE, Dev), business referents and other support functions (purchasing, legal, HR) to refine the requirements to be applied, the priorities, the schedule and the continuous improvement cycle + Awareness sessions with High-Management.
Final presentation meeting with C-level / High-Management to get final decision.
Customer Ready Solutions
Relying on our expertise and our cloud security experiences acquired with clients in all business sectors, you will build a pragmatic, comprehensible and efficient Cloud Security roadmap that help you achieve your compliance and risk management needs to adequately protect every use cases of your organization, such as IaaS/PaaS/SaaS, cloud & CI/CD perimeter, data, IoT, ML usages, in line with DevSecOps, including automation, Shift Left and Zero Trust approaches, and regulatory / standards requirements (GDPR, PCI-DSS, SOX, ISO 27xxx, sovereignty, GxP…).
“We are convinced that security adapted to the specificities of the cloud is based on 4 pillars, which are an iterative approach, co-construction with all representatives of the organisation, automation and the use of the supplier’s managed security services. The stage of building a cloud security strategy allows each company to enrich its traditional risk management approach by integrating these 4 pillars into its security approach. ”
