Cloud Shepherd is designed to strengthen the security posture of your AWS Cloud Accounts through the implementation of automated preventative and reactive controls. This offering provides defined consulting support and implementation assistance. We offer several tiers of services.

1. Cloud Shepherd for AWS – FREE Tier Customer gets to try 3 free automated preventative and reactive policies to experience the power and benefits of our automated controls. Contact seller to obtain the following free policies:

• Prevent member accounts from leaving the organization (Preventative)
• Prevent users from disabling CloudWatch or altering its configuration (Preventative)
• Versioning on S3 Buckets (Reactive)
  *Seller does not offer implementation support as part of the FREE Tier.

2. Cloud Shepherd for AWS – Quick Starter Program Customer gets to select up to 15 policies from the automated preventative and reactive policy pool provided by Protiviti.

• Protiviti assists with the policy selection based on the services that are currently used and customer’s requirements.
• Protiviti writes and provides automated policy files for selected automated preventative controls in AWS.
• Protiviti writes and provides automated scripts for selected automated reactive controls in AWS.
• Protiviti assists with policy implementation and testing (limited to 1 AWS organization).
• Protiviti provides documented testing evidence.

3. Cloud Shepherd for AWS – Custom Consulting Engagement The engagement is tailored to customer’s unique needs and requirements. Customer gets to scope the engagement with Protiviti and choose from a comprehensive list of consulting services:

• Policy Selection: Select from an existing set of policies or work with the client to define custom policies based on their own cloud security requirements.
• Requirements Mapping: Map policies to the client's security requirements and compliance requirements.
• Policy Development: Develop policies and supporting documentation.
• Policy Deployment: Deploy manually using the console or an automated tool (i.e., Terraform or Cloud Formation)
• Policy Testing: Test policies manually or using automation (i.e., Terraform) and create testing evidence documentation.
• Process Development: Create and document processes to deploy new policies, maintain policies, handle exceptions, etc.
• Policy Roadmap Recommendations: Develop a roadmap for implementing additional policies in the future.
• Custom Support Plan: Create a custom support plan that best fits the client’s needs.