Establishing secure minimum viable landing zone for workloads and applications for multinational banking firm.
Objectives:
Assessing security and cloud maturity model of company
Designing complex cloud-based infrastructure as secure minimum viable landing zone with enhanced security, high-availability and compliance in mind.
Integration of local infrastructure to MVLZ to achieve integrity of workloads and applications.
Implementation includes data exfiltration mechanisms, administration controls services, encryption strategy to align with current tech-stack and compliance, secure design and implementation of network including IDS solution.
Time to Complete:
8-12 months. A comprehensive assessment, design and implementation for a large corporation will need this time for creation of secure and scalable solution to handle every workload and application of company operating in highly-regulated industry.
Team Structure:
Agile Lead (1) to oversee the entire process of building minimum viable landing zone and ensuring alignment to business requirements.
Cloud Security Architect (1) to design, conduct a workshops and act as SME for created solution.
Compliance Expert (1) to review and advice regarding achieving compliance with regional and industry regulations.
Cloud Engineer (3) to conduct a workshops and implement solutions designed pursuing the strategy of zero-trust and defense-in-depth.
Required Resources:
Cloud computing and services
Platform for communication
Platform for developing infrastructure-as-a-code
Additional Info:
Cooperating with cloud provider to ensure compliance achieved.