banner image

Cloud Architecture Assessment

Understand how open you are

Cloud is not simply a new way of delivering old technology, it introduces new concepts and new possibilities for security that are not available with a traditional on-premise infrastructure. All cloud providers offer a wealth of security services, often replacing expensive point security solutions with free native implementations, but understanding how to use and orchestrate these services to best effect, while still taking advantage of everything that cloud has to offer, is a complex undertaking

Some of the possibilities open to you in cloud security are:

Compliance as code

Understand at a glance your up-to-the-second compliance with a range of security standards. No more waiting months for an expensive audit, now you can see - and prove - compliance at a moment's notice.

Shrug off ransomware attacks

With versioning file systems, automated deployments, read-only backups, and secured golden images, we can create an infrastructure that can recover in minutes from an otherwise devastating ransomware attack.

Kill APTs, no matter how they got in

Advanced Persistent Threats (APTs) are highly resourced attackers that exploit high severity, often zero-day vulnerabilities to get in and stay in, until the time is right for a major attack. The average time between infiltration and discovery of an APT is 145 days, and that only counts the ones that get discovered. With a decomposed, scalable, immutable, rotating architecture we can boot out the most dedicated of attackers within days, without even needing to know they were there.

Stop lateral movement

Attackers get in through your weakest link - no matter what it is - then spread laterally until they hit the good stuff. We use free native services to implement unbreakable segregation between trust zones, so that if an attacker does get in, they're sandboxed and cannot spread.

Eliminate multi-tenancy

Letting multiple clients share one infrastructure is a disaster waiting to happen. Unless you have everything set up perfectly, there will come a time when one client is asking why they're seeing the wrong data - and asking who is seeing theirs. Using infrastructure as code and a decomposed design, we can enable virtual multi tenancy in a series of parallel architectures: all the cost savings of multi-tenancy, all the security of dedicated environments.

Data Sovereignty on a dime

If you have a global client base, you have a global set of privacy, security, and data sovereignty requirements to meet. We can implement a modular architecture that can be deployed to individual regions at will, ensuring your data stays on shore, even if you aren't.

Patch once, patch everywhere

Patch management used to be a major logistical operation, and would always miss a few servers here and there, creating the weakest links that attackers like to look for. By properly implementing infrastructure as code, and with a minimum set of standard, hardened builds, we can make patch management a fully automated process that never misses a target.

If you've lifted and shifted a legacy architecture to the cloud, you have the worst of both worlds: the increased exposure of the cloud, with all the drawbacks of a legacy architecture. We can help review and (re-)design your entire cloud architecture, to provide increased protection alongside decreased costs.

Document Analysis

Our team begins by analysing the cloud architecture document to understand the technology and application stack. This is done to identify the key components and understand how they fit together.

Requirements Gathering

The next step is to gather requirements. Our team works with your organisation to understand your business objectives, application requirements, compliance requirements, and other relevant factors.


Our team will conduct a cloud architecture document assessment. This assessment will identify potential risks, such as security and data privacy issues, that must be addressed.

Good Practice Analysis

Our team will then analyse the cloud architecture document against industry best practices to ensure it is optimally designed. This analysis includes scalability, performance, security, and compliance.

Cost Optimisation

We also focus on cost optimisation to ensure that the cloud architecture document is designed in a way that is cost-effective for your organisation.


Our team will provide comprehensive recommendations to optimise the cloud architecture document based on our assessment. These recommendations will be prioritised based on risk and cost, and we will work with your organisation to implement them.

Follow-up Review

Finally, we will conduct a follow-up review to ensure that the recommendations have been implemented effectively and that the cloud architecture document meets your business needs.

A comprehensive review of your cloud architecture document is critical to your organisation's success. Our team of experts has the experience and expertise to help you optimise your cloud architecture document to ensure that it is secure, compliant, and cost-effective.

Contact us today to learn more about how we can help you review your cloud architecture document.

Pragma Logo

Terms & conditions

Privacy Policy