Cloud_Security_Assessment: 2-Month Assesment

From Cipher we will accompany you in the security of your Azure environments, creating and executing a completely customized security action plan that will guarantee the increase of your security against risks. Cipher will create a security plan, after auditing your infrastructure in Azure, whose objective will be to align and prioritize all the recommendations of Microsoft, good practice guides or local authorities. To do this, we will conduct interviews with stakeholders in Azure infrastructure; the owner of the implemented solution, IT and Security (if it exists in your organization) with the main objective of deeply understanding the objectives, expectations, and concerns. All Azure consoles will then be reviewed. Finally, the actions of Identity and Access management, Security Operations Management and data management and secure applications will be carried out, for this among others the following tasks will be carried out: • Configure Microsoft Azure Active Directory for workloads. • Configure Microsoft Azure AD Privileged Identity Management. • Monitor privileged access, configure Access Reviews, enable Privileged Identity Management. • Configure Microsoft Azure tenant security. • Implement network security. • Implement host security. • Configure container security. • Implement Microsoft Azure resource management security. • Configure security services. • Configure security policies. • Manage security alerts. • Configure security policies to manage data. • Configure security for data infrastructure. • Configure encryption for data at rest. • Implement security for application delivery. • Configure application security. • Configure and manage Key Vault. • Hardening of the servers.