Achieving high level of governance risk and compliance (GRC) standards in the Cloud is necessary given the speed and scale it accords; hyper-connected business environment; and stringent regulatory imperatives. While GRC is used in the same breath each function is separate and forms the basis of a security architecture and operational processes. Governance provides the […]
The rush to exploit Cloud advantages of speed and high velocity must be carefully balanced with thoughtful security. Given that attacks are increasingly more sophisticated and vicious, this has become even more pertinent. Often despite the best precautions someone, somewhere makes a mistake and hackers make the most of it. Automation—one of the hallmarks of […]
The new business imperatives enabled by Cloud services namely the need for speed at scale and high velocity releases must be balanced by managing associated risks such as adhering to compliance and meeting IT security needs. The flip side of not managing risk is obvious—it amplifies the organization’s exposure to breaches causing irreparable damage; and […]
Organizations using AWS Cloud end up having several accounts for different purposes including the need to manage operations with separate accounts for different departments, deployments, new projects, functional requirements such as dev, test and production, etc. The reasons may be numerous but the underlying reason remains the same—operational efficiency which ironically is compromised as chaos […]
In its continuous endeavour to listen to customers, Amazon Web Services has launched a slew of services aimed at addressing security concerns of customers running applications on its platform. Security on Amazon Cloud is a shared responsibility. The underlying physical infrastructure is AWS responsibility and the company has achieved major certifications and compliance including SOC […]