Relying on our expertise and our cloud security experiences acquired with clients in all business sectors, you will build a pragmatic, comprehensible and efficient Cloud Security roadmap that help you achieve your compliance and risk management needs to adequately protect every use cases of your organisation, such as IaaS/PaaS/SaaS, cloud & CI/CD perimeter, data, IoT, ML usages, in line with DevSecOps, including automation, Shift Left and Zero Trust approaches, and regulatory / standards requirements (GDPR, PCI-DSS, SOX, ISO 27xxx, sovereignty, GxP...).

At the end of the project, you will have :

• An assessment of your Cloud Security (CS) maturity level
• A presentation of cloud security roadmap & project of similar actors
• Materials to increase cloud security awareness of your C-level management, IT & Business actors
• An annual / triennial cloud security roadmap: themes, actions, stakeholders, prerequisites, priorities, loads - aligned with global security strategy and IT / Business roadmaps
• 1-5 “cloud security roadmap” follow-up KPIs

Our project methodology is divided into 4 steps:

• Scoping: confirmation of project targets, overview of cloud & global security state of work, high level assessment of Cloud security maturity (on technical and functional axis), inventory of internal / regulatory requirements
• 1-2 workshops to initialise the CS roadmap: presentation of similar CS roadmaps, 1st proposal based on security teams priorities (process, operating models, tools), disposal to implement and follow-up the roadmap, project’s key success factors, com. Plan
• 2-X workshops to co-build the CS roadmap with IT teams (cloud architects, DevOps, SRE, dev., …), business referents and other support functions (purchasing, legal, HR) to refine the requirements to be applied, the priorities, the schedule and the continuous improvement cycle + Awareness sessions with C-level/High-Management
• Final presentation meeting with C-level/High-Management to get final decision