{"id":31978,"date":"2022-08-08T15:52:55","date_gmt":"2022-08-08T10:22:55","guid":{"rendered":"http:\/\/ismiletechnologies.com\/?p=31978"},"modified":"2022-12-12T18:24:59","modified_gmt":"2022-12-12T12:54:59","slug":"defining-our-cloud-security-enablement-approach","status":"publish","type":"post","link":"https:\/\/ismiletechnologies.com\/en_us\/cloud-security\/defining-our-cloud-security-enablement-approach\/","title":{"rendered":"Defining Our Cloud Security Enablement Approach"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"31978\" class=\"elementor elementor-31978\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-ed14fa8 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"ed14fa8\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-35828a4\" data-id=\"35828a4\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5e9c750 elementor-widget elementor-widget-text-editor\" data-id=\"5e9c750\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\">It has long since been said that by failing to prepare, you prepare to fail. It is no different when deploying organizational policies and uniform security guidelines across your cloud infrastructure. Learn about how ISmile Technologies approaches <span style=\"color: #14a49c;\"><a style=\"color: #14a49c;\" href=\"http:\/\/ismiletechnologies.com\/cloud-security-managed-services\/\">Cloud Security Enablement<\/a><\/span> with due<\/span><span lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"> diligence.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a979a38 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"a979a38\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-014acde elementor-widget elementor-widget-heading\" data-id=\"014acde\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Prioritized Milestones &amp; Discovery<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b51471e elementor-widget elementor-widget-text-editor\" data-id=\"b51471e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\">ISmile Technologies takes a prioritized, milestone-based approach to evaluate business requirements for security enablement. As a result, our clients benefit from:\u00a0<\/span>\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b689763 elementor-widget elementor-widget-text-editor\" data-id=\"b689763\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<ul><li>Reduced overall project risk through increased duration and thoroughness of testing<\/li><li>Prioritized security controls enablement in the environment<\/li><li>Efficacy through aligning test execution with business functionality in the environment<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-57fcc8f elementor-widget elementor-widget-text-editor\" data-id=\"57fcc8f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>At the beginning of the enablement timeline, we undergo a discovery phase, in which we evaluate all the required resources that ought to be deployed using IaC. This typically takes the form of a two-week sprint, where we review drawings, videos, and other documentation created by the Enterprise Architecture team. This team is hired by the stakeholder from an official cloud provider to create a Cloud architecture for the stakeholder\u2019s purposes.\u00a0\u00a0<\/p><p>Following analysis of this documentation, we cross-reference best practices, the target architecture, and what is realistically feasible to create a requirements document for setting in stone what is to be created using Terraform\/IaC and what dependencies those resources require.\u00a0\u00a0<\/p><p>For example, to provision a database on the <span style=\"color: #14a49c;\"><a style=\"color: #14a49c;\" href=\"http:\/\/ismiletechnologies.com\/amazon-web-services\/\">AWS Cloud<\/a><\/span>, you need to know what subnet the database will exist in and what CIDR block it will be accessible through. That subnet will also need to be hosted on a VPC with its CIDR block, a routing table, a network access control list, a security group, and so on.\u00a0\u00a0\u00a0<\/p><p>On top of that, the database must have security measures that are met, handled by a SecOps team that is aware of recommended principles and practices and bases their connection of the database with the rest of the Cloud architecture based on organization documents.\u00a0\u00a0<\/p><p>All of this information and more must be consolidated for the sake of creating a proper requirements document.\u00a0\u00a0<\/p><p>The timeline of implementation and delivery of products is thus affected by the requirements document generated after discovery. For example, if the original specified delivery timeline was over 2 months, the requirements document generated in the discovery period may prove a deadline impossible to meet. This would be communicated to the Enterprise Architecture team and the stakeholders to determine and evaluate a new, more appropriate deadline.\u00a0\u00a0<\/p><p>Implementation can begin after the discovery phase and confirmation of briefing with the Enterprise Architecture team. This includes:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-75803fa elementor-widget elementor-widget-template\" data-id=\"75803fa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"template.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-template\">\n\t\t\t\t\t<div data-elementor-type=\"section\" data-elementor-id=\"36130\" class=\"elementor elementor-36130\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2e26420 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2e26420\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;gradient&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-790d5f4\" data-id=\"790d5f4\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-aeb095f elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"aeb095f\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-inner-column elementor-element elementor-element-b25172c\" data-id=\"b25172c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4f3d6ea elementor-widget elementor-widget-heading\" data-id=\"4f3d6ea\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Do an assessment of your Azure cloud security.<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6042693 elementor-widget elementor-widget-text-editor\" data-id=\"6042693\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Have you secured your Azure cloud environment? If you are uncertain, let our security professionals audit &amp; secure your Azure environment.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-inner-column elementor-element elementor-element-f62d1fb\" data-id=\"f62d1fb\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-cc0ffab elementor-align-center elementor-widget elementor-widget-lottie\" data-id=\"cc0ffab\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;source&quot;:&quot;external_url&quot;,&quot;source_external_url&quot;:{&quot;url&quot;:&quot;https:\\\/\\\/assets4.lottiefiles.com\\\/packages\\\/lf20_kkesf8mx.json&quot;,&quot;is_external&quot;:&quot;&quot;,&quot;nofollow&quot;:&quot;&quot;,&quot;custom_attributes&quot;:&quot;&quot;},&quot;loop&quot;:&quot;yes&quot;,&quot;play_speed&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:0.9,&quot;sizes&quot;:[]},&quot;lazyload&quot;:&quot;yes&quot;,&quot;link_to&quot;:&quot;none&quot;,&quot;trigger&quot;:&quot;arriving_to_viewport&quot;,&quot;viewport&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:{&quot;start&quot;:0,&quot;end&quot;:100}},&quot;start_point&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:0,&quot;sizes&quot;:[]},&quot;end_point&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:100,&quot;sizes&quot;:[]},&quot;renderer&quot;:&quot;svg&quot;}\" data-widget_type=\"lottie.default\">\n\t\t\t\t\t<div class=\"e-lottie__container\"><div class=\"e-lottie__animation\"><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-inner-column elementor-element elementor-element-5f5686c\" data-id=\"5f5686c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5deded9 elementor-align-right elementor-mobile-align-left elementor-tablet-align-right elementor-widget elementor-widget-button\" data-id=\"5deded9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-xs\" href=\"http:\/\/ismiletechnologies.com\/azure-cloud-security-assessment-workshop\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Proceed<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0392a8b elementor-widget elementor-widget-text-editor\" data-id=\"0392a8b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<ul><li>Designing and documenting the architecture to be provisioned with Terraform,<\/li><li>Defining security controls and requirements for authentication,<\/li><li>Including considerations from ISO-27001, <span style=\"color: #14a49c;\"><a style=\"color: #14a49c;\" href=\"https:\/\/www.nist.gov\/cyberframework\">NIST Cyber Security Framework<\/a><\/span>, ISO-22307, CoBIT, PCI DSS 3.2.1, and CIS benchmarks<\/li><li>Network security,<\/li><li>Monitoring,<\/li><li>Blob\/file storage, and SQL DW,<\/li><li>As well as mapping, documenting, implementing, and testing security controls for deployment.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5b43ad8 elementor-widget elementor-widget-text-editor\" data-id=\"5b43ad8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>The total of working on this stage of the enablement process can take anywhere from 4 to 6 months for an average timeline.\u00a0\u00a0<\/p><p>Moving on from implementation, deliverables by the end include production and non-production environment specifications, architecture, security and controls, and governance processes and procedures to adhere to security compliance. Additionally, operational processes and procedures for all tasks are required in both environments so that the architecture can remain stable even after consultation is complete.\u00a0\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-94a38d6 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"94a38d6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-931e313 elementor-widget elementor-widget-heading\" data-id=\"931e313\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Conclusion\u00a0<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3f79b07 elementor-widget elementor-widget-text-editor\" data-id=\"3f79b07\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>The adoption of the cloud introduces a shared responsibility model for security. Consumers have the most responsibility with IaaS and the least with SaaS cloud models. This shared responsibility model can create confusion and risk exposures for cloud consumers if not properly understood and addressed.&nbsp;&nbsp;&nbsp;<\/p>\n<p>Therefore, organizations should clearly define cloud security roles and responsibilities and verify cloud vendor contracts, implementations, and control operations address gaps.&nbsp;&nbsp;<\/p>\n<p>Having a security partnership capable of helping you ensure valid security controls can bring a competitive advantage to your business. For more information, <span style=\"color: #14a49c;\"><a style=\"color: #14a49c;\" href=\"http:\/\/ismiletechnologies.com\/request-a-consultation\/\">Get Your Free Consultation<\/a><\/span>.&nbsp;<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-3d53280 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3d53280\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-89c2231\" data-id=\"89c2231\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5eccabd elementor-widget elementor-widget-spacer\" data-id=\"5eccabd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-b5f0c8c\" data-id=\"b5f0c8c\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-eabbb60 elementor-widget elementor-widget-heading\" data-id=\"eabbb60\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Cloud Engineer<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-31cd7ad elementor-widget elementor-widget-heading\" data-id=\"31cd7ad\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Gabriel Chutuape<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-74cadf5 elementor-widget elementor-widget-text-editor\" data-id=\"74cadf5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>A technology enthusiast passionate about automation, Gabriel Chutuape is a Cloud Engineer at ISmile Technologies. He\u2019s part of the ISmile Technologies Cloud enablement team that help customers to design\/solution\/project engineering, integrating and implementing infrastructure technologies &amp; services.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>It has long since been said that by failing to prepare, you prepare to fail. It is no different when deploying organizational policies and uniform security guidelines across your cloud infrastructure. Learn about how ISmile Technologies approaches Cloud Security Enablement with due diligence. Prioritized Milestones &#038; Discovery ISmile Technologies takes a prioritized, milestone-based approach to [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":31979,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[123],"tags":[],"class_list":["post-31978","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-security"],"_links":{"self":[{"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/posts\/31978","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/comments?post=31978"}],"version-history":[{"count":35,"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/posts\/31978\/revisions"}],"predecessor-version":[{"id":36189,"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/posts\/31978\/revisions\/36189"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/media\/31979"}],"wp:attachment":[{"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/media?parent=31978"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/categories?post=31978"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/tags?post=31978"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}