Securing disaster recovery on AWS using LCM Go Cloud’s CloudPosture

KONKAT supports around 30 companies spanning maritime, aviation, energy, and refining, running a shared DR environment on AWS that protects more than 60 virtual machines and 28 TB of data. Several of these companies are legally required to demonstrate compliance with cybersecurity regulations, particularly with the European Union’s NIS2 Directive. As the environment grew, KONKAT saw an opportunity to complement its strong on-premises expertise with a formal assessment of its AWS security posture. The assessment would help the organization identify areas for improvement, such as encryption settings, configurations, and identity and access management permissions. As the NIS2 Directive’s enforcement deadline approached, KONKAT also needed auditable evidence that its DR environment aligned with recognized cybersecurity frameworks.

The scale of the challenge was daunting for a security team accustomed to on-premises monitoring. The team had to deal with logs from separate AWS services with unfamiliar names, making it difficult to judge which issues were significant or how they mapped to NIS2 controls. “We needed a tool that could gather the various logs that exist in the AWS infrastructure for the services that we’re using and be able to correlate and present meaningful information without all the technical jargon,” says Zeppos Galanos, information security officer at KONKAT. Beyond demonstrating compliance, the business also needed to prevent the risk of any security issue in the shared infrastructure cascading across 30 companies in regulated industries, especially because the company was about to onboard 100 additional virtual machines.

KONKAT was introduced to LCM Go Cloud through the local AWS team in Greece. LCM Go Cloud deployed a two-layer approach, starting with an AWS security services baseline built on AWS Config to assess, audit, and evaluate configurations of resources; Amazon GuardDuty to protect AWS accounts, workloads, and data with intelligent threat detection; AWS Security Hub to prioritize critical security issues and help respond at scale; and Amazon Inspector for automated and continual vulnerability management at scale. All this was codified to facilitate repeatable audits in AWS CloudFormation, which speeds up cloud provisioning with infrastructure as code.

On top of that baseline, LCM Go Cloud layered its CloudPosture solution. CloudPosture runs 757 security checks through 19 specialized AI agents—powered by Amazon Bedrock, the platform for building generative AI applications and agents at production scale—and maps findings to 16 international compliance standards. CloudPosture also uses Amazon Bedrock to generate remediation guidance in AWS CloudFormation, Terraform, command-line interface, or console format. Additionally, the solution runs 22 cost optimization agents, giving KONKAT visibility into cost drivers that it had not previously tracked. Galanos and his team met with LCM Go Cloud on a weekly or biweekly basis to review findings, assign remediation tasks, and track progress against a task list. “We trust LCM,” says Taxiarhis Georgiou, IT director at KONKAT. “They know our needs, they understand our mentality and our company, and we are very lucky to be one of the first companies to try CloudPosture.”

Within 10 weeks, KONKAT moved from an unassessed environment to grade B+ across its primary compliance frameworks, with NIS2-specific controls reaching grade A. All critical and high-severity findings identified during the assessment were resolved, and weekly automated scans now track compliance drift across the environment. “To get to 80 percent compliance—up from 25 percent—in that short time was a big change for us,” says Galanos. “In terms of security, we didn’t know what to look for before, and now we can both find and solve issues on our own or automatically.”

The security team now has auditable evidence that it can present to regulators and its governance board, closing a gap that had left KONKAT unable to answer audit questions about its AWS environment with certainty. Cost optimization reports generated by the solution have also informed KONKAT’s decisions about which services to scale up or down. “Using such an intelligent tool as LCM Go Cloud’s CloudPosture to monitor our AWS environment is a huge advantage,” says Galanos. “We will continue to work closely with LCM on any AWS endeavor that we have in the future.”

LCM Go Cloud is an AWS Partner based in Athens, specializing in cloud resilience, security, and generative AI solutions.