Secure and Operate
Security, Identity and Compliance
Security here means a small number of things done thoroughly: knowing who can reach what, keeping data where you said it would be, seeing an incident while it is happening, and being able to restore from backup because you have actually tried.
What this includes
Identity and access control
Who can reach what, enforced centrally, with multi-factor sign-in and access that expires rather than accumulates.
Conditional access policies
Access decided by who is asking, on which device and from where — not by a password alone.
Device protection and monitoring
Laptops and phones enrolled, encrypted, patched and reportable, including the ones that leave the office.
Threat detection and response
Alerting on the sign-ins and behaviours that indicate a compromise, with a documented response for when one fires.
Canadian data residency
Workloads and backups pinned to Canadian regions, with written evidence of where each one lives.
Information protection and retention
Classification, labelling and retention applied to confidential material so it is handled consistently.
Backup, recovery and continuity
Backups tested by actually restoring them, with recovery times you have measured rather than assumed.
Security assessment
Your environment measured against a recognized baseline, with the gaps ranked, costed and sequenced.
Web application hardening
Response headers set and tested — content security policy, HSTS, framing, referrer and permissions — so a browser refuses what your application was never meant to allow.
Technologies and standards
Related areas
- DevOps and Infrastructure as CodeEnvironments defined in code and deployed the same way every time.7 services
- Managed Cloud OperationsMonitoring, patching, backup and cost management once it is live.7 services
- Cloud Solution DesignAssessment, target design and a costed plan before anything moves.6 services
Not sure which of these you need?
Most organizations are not, at the start. Describe what is not working today and we will tell you which of these areas it actually falls into — including when the answer is that you do not need us.
Start a conversation