Cloud Risk Insights

We provide cloud GRC and Audit services span across first line of defence (monitoring and measurement), second line of defence (oversight processes and risk management frameworks ) and third line of defence (assurance processes ) Some of the services we can provide are : Cloud GRC & Audit • Identify cloud specific risks internal to the organisation and in the cloud ( e.g. SaaS, PaaS and IaaS) • Develop risk based control and assurance programs specific to entities’ requirements based on agreed upon frameworks such as NIST 2013, 2014; SANS, 2016, ISO 2700x COBIT , CSA Cloud Control Matrix etc. Cloud Transformation Project Risk Management • Identification, Assessment and Remediation of key Project Risks • Risk Remediation • Data Privacy and Security, PCI DSS Compliance • Identifying and recommending suitable security , GRC audit automation tools and processes for ongoing control monitoring Cloud Audit Analytics • Explore opportunities to leverage CSP and third party cloud management tools for developing analytics based audit programs ISO 27001 Compliance • Advise on requirements to achieving ISO 27001 certification • Co-ordinate ISO 27001 certification audits for cloud vendors • Advise on continuous improvement and compliance