05 · Cloud # Secure Cloud Enablement & Cloud Security Adopt and run cloud securely: migrate workloads safely and keep data private, protected and compliant. We also help cloud service providers meet standards such as STAR and FedRAMP. ## What’s included ### Cloud adoption & migration strategy - A secure adoption strategy aligned with your business objectives. - A cloud security framework built on the shared-responsibility model. ### Cloud security architecture - Secure public, private or hybrid environments on AWS, Azure, Oracle, Huawei and Google. - Encryption, IAM, network segmentation and secure deployment. ### CASB implementation - Cloud access security brokers that enforce policy across SaaS, PaaS and IaaS. - Continuous compliance in multi-cloud environments. ### Cloud security posture management - Continuous posture monitoring and configuration tuning. - Real-time detection of misconfigurations and vulnerabilities. ### Data privacy & encryption - Encryption in transit and at rest. - Robust key management and access controls. ### Cloud incident response - Cloud-specific response protocols, developed and tested. - Runbooks for rapid containment and recovery. We use the Cloud Controls Matrix (CCM) v4 as the foundational reference for the right controls. ## The shared responsibility model Every cloud provider secures the cloud itself: data centres, hardware and core infrastructure. You secure what you put in it: data, user accounts, permissions, network settings, encryption and applications. The split moves with the service type. With infrastructure as a service you manage more. With software as a service such as Microsoft 365 you manage less, but identities, data and configuration are still yours. Most cloud breaches come from this customer side: a public storage bucket, an admin without MFA or a key leaked in code. ## Top cloud security risks - Misconfiguration: public storage, open ports, default settings - Weak identity and access management: too many admins, no MFA, unused accounts - Secrets exposed in code repositories - No central logging or monitoring across accounts - Container and Kubernetes risks: vulnerable images and over-privileged pods - Regulated data stored outside the Kingdom without approval - Shadow IT: cloud services used without approval ## More cloud services we provide - **Identity and access review:** Users, roles, service accounts and permissions in AWS IAM, Microsoft Entra ID and Google Cloud IAM, brought to least privilege. - **Container and Kubernetes security:** Image scanning, runtime protection and secure configuration for EKS, AKS and GKE. - **DevSecOps:** Code scanning, secrets detection and infrastructure-as-code checks for Terraform and CloudFormation in your pipelines. - **Microsoft 365 and Google Workspace hardening:** Email, collaboration and identity settings, among the most targeted cloud services. ## Cloud regulations in Saudi Arabia - **NCA Cloud Cybersecurity Controls:** Controls for cloud service providers and tenants, building on ECC. - **CST Cloud Computing Regulatory Framework:** Rules for cloud providers operating in the Kingdom. - **PDPL:** Conditions for transferring personal data outside Saudi Arabia. - **National data classification:** Government data is classified as top secret, secret, restricted or public, which affects where it can be hosted. - **SAMA:** Requirements for financial institutions outsourcing to cloud providers. ## Why CYBRT ### Riyadh-based, Gulf-focused Headquartered in Riyadh, working with organisations across Saudi Arabia and the Gulf. ### Certified consultants Our team holds CISA, CISM, CRISC, CGEIT, CDPSE, CCSP, CCSK, COBIT and ISO 27001 Lead Auditor certifications, among others. ### Regulation-ready We work with NCA and SAMA frameworks alongside ISO, NIST and PCI-DSS, so controls map straight to what auditors expect. ### End to end Six connected services, from strategy and awareness through testing, operations, cloud and technology. ## Frequently asked questions ### Which cloud platforms do you work with? Public, private and hybrid environments on AWS, Azure, Oracle, Huawei and Google Cloud. ### Can you help a cloud provider achieve STAR or FedRAMP? Yes. We help cloud service providers meet standards such as CSA STAR and FedRAMP. ### Which control framework do you use for cloud? The Cloud Controls Matrix (CCM) v4, as the foundation for implementing and maintaining the right controls. ### Is the cloud less secure than on-premises? Not by default. The cloud can be very secure when configured correctly, but a single mistake can expose data to the whole internet very quickly. ### Do we have to keep data inside Saudi Arabia? It depends on the data classification and your sector. Government data and many regulated data types must stay in the Kingdom or need specific approval. We help you work out what applies. ### How long does a cloud security assessment take? Usually one to three weeks, depending on the number of accounts and workloads. ## Related services ## Ready to protect your business? Book your free security consultation today. --- Canonical page: https://cybrt.sa/services/cloud-security/ Guide for AI agents: https://cybrt.sa/llms.txt