Cloud Security Architecture

Details and scope

Design the security boundaries and control plan for a multi-workload cloud estate. Threat model, identity and network design, logging requirements and phased implementation plan. Design decisions trace to threats and workloads; all review comments receive a disposition. The stated scope is agreed before work starts; additional work is quoted separately.

Specifications

• 1 provider; up to 3 accounts, 5 workloads and 20 identity roles; 2 design reviews
• 84 specialist-hours including preparation, delivery, checks and handover
• Threat model, identity and network design, logging requirements and phased implementation plan
• Acceptance: Design decisions trace to threats and workloads; all review comments receive a disposition
• Excludes: Production implementation, subscriptions, penetration testing and certified compliance