Review agreed security controls against clear criteria, with evidence, limitations and follow-up actions your team can understand.
Proxar · UK expertise
Cloud security services
Your cloud provider looks after part of the security picture, but not every setting or access decision in your environment. We help you understand your responsibilities, review the agreed systems and plan changes around the applications they support.
Technology partnerships
Technology partners you know
We help you choose and look after the technology your team uses every day.
Find the accounts and the people responsible for them
We begin with the accounts or subscriptions, important applications and connections to other systems. Administrative roles and supplier responsibilities help establish which settings can be reviewed and who can approve a change.
The checks need to suit the service in use. A hosted business application and cloud infrastructure do not present the same configuration choices. Access assignments, logging and protection settings should be considered in the context of the actual platform and workload.
Improve the control without breaking the service
A publicly reachable resource may need tighter access, but it could also serve an external integration. Identify the required traffic and application checks before making the change. Security work needs the application owner’s context, not only a configuration recommendation.
Findings should point to the affected resource and evidence, with a priority, an owner and any dependencies. Agree which changes need approval, how they will be checked and how accepted exceptions are recorded.
Reviewing account permissions for cloud security · Illustrative image
Decide who keeps the new settings in good order
A successful review does not stop users, applications and resources changing afterwards. The business needs owners for maintaining the resulting controls and reviewing exceptions as the environment develops.
Cloud management can cover agreed recurring administration. Cloud detection and response addresses investigation of suspicious activity. Configuration review and incident investigation are different jobs, even when they draw on some of the same information.
Bring the platforms you use and the concerns you want checked. We will help you distinguish the review, implementation and ongoing responsibilities needed rather than assume one engagement includes every future security task.
Client experience
What our clients say
“I’ve worked with Proxar for a number of years and have always found them to be honest, knowledgeable and informative.”
Before you decide
Your questions, answered
Will the review include every cloud account we have?
Only the accounts and systems included in the agreement and made accessible for the work. Discovery should identify missing accounts or unclear ownership early. The report needs to explain how any limitations affect its coverage rather than imply a complete review of systems that could not be inspected.
Does the cloud provider already handle this security work?
Responsibilities depend on the cloud service. The provider operates certain layers, while your organisation retains choices about business use, permissions and relevant configuration. We establish that division for the environment being reviewed instead of assume that a hosted platform removes every customer security task.
Will tighter settings affect our applications?
They can, which is why application dependencies and representative checks matter. An access restriction may also affect a legitimate supplier connection or business workflow. Significant changes need the appropriate owner’s input and approval, with validation and any necessary exception recorded rather than introduced without context.
Does the review include investigating a suspected incident?
Not automatically. A configuration review and an active investigation have different objectives, evidence needs and response arrangements. Tell us about any suspected incident at the outset so the required assistance can be considered separately rather than hidden within a routine review request.
Your next step
Which cloud settings or responsibilities are unclear?
Tell us about your platforms, important applications and the access or exposure concerns you want checked. We will help you identify the review and changes needed, including who should maintain the result.