Cloud Security

Cloud computing offers huge benefits for organisations, reducing cost and increasing the speed at which applications and infrastructure can be deployed. The cyber security of cloud platforms is a shared responsibility between the cloud provider and a customer, redefining the responsibilities from the traditional on premises environment.  

Data Protection drives many of the choices around cloud architecture. Working with our Data Protection colleagues, we are able to advise on the architecture choices and security controls that will meet regulatory requirements and data subjects’ expectations, as well as addressing cyber risk.

We find that when moving to the cloud, the key is in the detail. Cloud platforms are subtly different from what is often expected and proper design and architecture can prevent issues further on down the line. Cloud systems have a host of issues not found in traditional systems, from opening up attacks on APIs to publishing sensitive content in cloud storage systems by default.

Our team has experience of securing and assessing cloud security across both the Amazon Web Services and Microsoft Azure platforms, as well as the use of third-party systems such as VMWare.