Cloud Security
Cloud Security in Zimbabwe
The cloud is only as secure as its settings
Accounts without two-step sign-in, files shared with anyone who has the link, old staff accounts still active, and admin rights handed out too widely. The provider secures the platform; how it is set up is your responsibility.
Sign-in and access
Two-step sign-in coverage, admin rights, old accounts and who can reach what.
Email protection
Whether someone can send email that looks like it came from your business, and how phishing is filtered.
Sharing and data
Files, folders and storage shared more widely than intended.
AWS and Azure configuration
Exposed storage, open services and risky permissions in your cloud hosting.
How we work
01
Scope
We agree which platforms and accounts are included, and the owner signs a written authorisation.
02
Review
Settings are reviewed with read access agreed with you, never changed without your approval.
03
Report
Findings ranked by business risk, with clear steps to fix each one.
04
Walk through
A call to agree priorities with you and your administrator.
What you get
- Written authorisation from the account owner and an agreed scope
- Review of the agreed platforms: Microsoft 365, Google Workspace, AWS or Azure
- Sign-in, admin rights, sharing and email protection checks
- A written report with findings ranked by business risk
- Step by step fixes your administrator can follow
- A walk-through call
Cloud security review
Quoted
Priced after scoping, based on the platforms and number of users. Work starts once the commitment fee in the quote is paid.
Before you approve it
The engagement, in facts.
- Typical timeline
- 1 to 2 weeks
- Report
- Within 3 working days of testing ending, findings ranked by risk with a fix for each
- Retest
- Free retest of fixed findings within 30 days
- Standards
- OWASP, PTES, NIST SP 800-115 and CVSS
- Confidentiality
- We sign your NDA before scoping, on request
Questions, answered
Which platforms do you review?
Microsoft 365, Google Workspace, Amazon Web Services and Microsoft Azure.
Do you need our passwords?
No passwords by email, ever. Where the review needs access, we agree a secure, limited method with your administrator, and access is removed when the work ends.
Will you change our settings?
Not without your approval. The review reports what to change; applying the changes can be quoted separately if you want help.
We are a small business. Is this relevant?
Yes. Small businesses run their whole operation on email and shared files, and a single taken-over account can expose clients, invoices and payments.