NZISM Controls in the Cloud

Two major Cloud providers have recently released resources for simplifying customers’ compliance to NZISM: AWS has put out their Operational Best Practices for NZISM conformance pack? and Microsoft has released? NZISM Azure Policy tools.?

These allow you to create security, operational or cost-optimisation governance checks using pre-packaged configuration items, co-authored by the same team responsible for the NZISM itself.?

ZX Security has been doing a lot in the cloud space recently as well, we have four distinct services on offer, please contact [email protected] if you would like to learn more.?

Cloud Security Maturity Assessments

The Cloud Security Maturity Assessment provides you with a level understanding of what your current risks are, and provides guidance on the next steps along your cloud security journey. Focused primarily on your business needs, we will identify key threats and vulnerabilities within.

Cloud Security Professional Services

We provide ongoing engagements specifically tailored to customers on their cloud journey. ZX Security consultants are available to advise on cloud security throughout the project life-cycle:

• Advising on pragmatic security configurations during the design phase
• Reviewing deployments as the development progresses
• Facilitating penetration testing of customer developed solutions at the optimal stages to get best value and security outcomes
• Confirming the security posture of the environment or product prior to go-live
• Ensuring that ongoing security operations includes and maximises the potential of cloud security technology.

Cloud Security Reviews

Across all cloud platforms, these security reviews are based on industry best practices along with ZX Security's local experience, providing the required knowledge customers need to minimise their attack surface in cloud with pragmatic recommendations tailored to their customers' appetite for simplicity. We deal with all sizes of cloud deployment: from single applications through to enterprise-wide cloud environments. Cloud Security Reviews cover all manner of cloud offering:

Continuous Cloud Security Posture Management

ZX Security provides ongoing monitoring and alerting of our client's security posture in cloud. This ensures that security operations' teams are aware of changes happening throughout the business that may weaken the security posture of the environment.?