Integration of Technical Solutions
Cloud security assurance initiative
Overview
Talent has been working with a client in the education sector that has multiple cloud environments that have evolved over years and incurred technical debt due to the ever-changing government landscape and cloud evolution. The result is a lack of effective governance and control, especially on provisioning and ownership of resources, lack of security model & expertise in the cloud, identification of risks/vulnerabilities, ensuring compliance, lack of consistent management across the different clouds and tenancies etc. This is coupled with the inherent weaknesses of the cloud, such as vulnerable APIs, compromise of credentials, broken authentication, etc. Talent was brought in to assess the client’s security posture against industrial benchmarks; we provided a strategic roadmap that covers identified risks covering all security domains, architectural guidelines, and compliance dashboards to help promote continued visibility and progress overtime. Working alongside the CSO, Talent also provided an assessment on their working practices and a to-be security model with special emphasis on identity and access management of their users in the cloud.
Integration of Technical Solutions
Department for Education
Cloud security assurance initiative
Understanding the current security state
One of the objectives of the cloud security assurance initiative was to provide an insight into the client’s current security posture across their tenancies in Azure, against best practices. To achieve this, we’ve performed the following:
Assessed the current as-is Identity and Access Management (IAM) operating model for each of their 7 Azure tenancy
We’ve conducted stakeholder interviews to understand the processes & workflows; how user access is managed (JML), how permissions are elevated, use of MFA, etc.
Reviewed current Azure AD structures to identify whether management of all tenancies is centralised through automated processes, and to collect evidence to support risk identification.
We uncovered areas of security and financial risks associated with cloud identity relevant threats, compliance threats, and provide a strategic roadmap that is tailored to the client’s organisation to improve their cloud security posture.
Overall, Talent helped the client achieve security visibility across its multiple Azure tenants and provided visual aids to help the client maintain an overtime compliance view. This allows the client to benchmark its security maturity against leading industry standards & frameworks. The proposed security operating model for IAM, which allows a smoother move to a single tenancy was accepted and a roadmap for this change was reviewed and communicated to Senior leadership teams. The client is now progressing with remediations and identified risks as agreed in the roadmaps, with continued support from Talent. Reports generated since the initiative began in November 2021 enabled leadership to make informed cyber risk-based decisions, improve deployment of policies, and identify ROI on cloud security investments.
Our services
Advisory & Discovery
We take an agile approach, working closely with you and your team to ensure your projects are completed on time, in budget, and with a focus on flexibility, collaboration, and continuous improvement.
Our services
Digital Transformation
At Talent Consulting, we take a holistic approach to digital transformation, seamlessly integrating technology, business strategy, and user needs to create solutions that work—no matter your organisation's size.
Our services
Agile Project Delivery
We take an agile approach, working closely with you and your team to ensure your projects are completed on time, in budget, and with a focus on flexibility, collaboration, and continuous improvement.
Our services
Training & Upskilling
We don’t just deliver solutions—we empower your teams with the knowledge and tools they need to keep moving forward. Through training and knowledge transfer, we leave you better equipped for long-term success.