Skip to main content
+254 734 461 317

Security

Cloud security and compliance

Use the cloud with the right settings, the right access and a record of both.

Overview

Cloud services are secure when they are set up carefully and unsafe when they are not. Most cloud incidents come from settings left open, accounts with too much power or missing records of who did what.

We review your cloud accounts against sensible standards, tighten the settings that matter and set up logging and alerts. We work with Amazon Web Services, Microsoft Azure and Microsoft 365.

We also help you understand your duties under Kenyan data protection law. We describe what good practice looks like and what to document. We do not give legal advice, and you should check the current requirements for your sector with a lawyer.

What is included

  • Cloud configuration review

    A check of your accounts and services against recognised good practice, with the gaps listed and ranked.

  • Identity and access

    Single sign-in, a second step for every account, and permissions limited to what each person needs.

  • Data protection controls

    Encryption, storage rules and sharing settings that keep sensitive files where they belong.

  • Logging and alerts

    Records of sign-ins and changes, and alerts for the events that deserve attention.

  • Microsoft 365 security

    Email protection, sharing controls and device rules for your Microsoft 365 tenant.

  • Compliance support

    Help with the records, policies and evidence that a data protection review will ask for.

How the work is delivered

  1. Step 1

    Assess

    We list your cloud services, accounts and the data that lives in each.

  2. Step 2

    Design

    We agree the settings, access rules and records you need.

  3. Step 3

    Implement

    We change the settings, switch on logging and test that nothing your staff rely on breaks.

  4. Step 4

    Monitor

    We review alerts and settings regularly, because cloud services change often.

What you end up with

  • Cloud accounts with a second sign-in step on every user
  • Permissions that match each person's job
  • Logs that show who did what and when
  • Documents ready for a data protection review
  • A clear list of what is still open and why

Questions we are often asked

Talk to us about Cloud security

Tell us what you have today and what worries you. We will tell you honestly what we would do.