Feed on
Posts
Comments

Tag Archive 'Azure'

Continuous compliance on every machine

Posted in Security Architecture, Technology on Mar 7th, 2021

I have spent some time lately looking at how Azure can help with the technical part of compliance, and I´m impressed by where this is heading. Most of the technical controls in standards like ISO 27001 and NIST are about configuration. Is the disk encrypted? Is the firewall on? Are the right security settings applied? […]

Read Full Post »

Who is Owner in your Azure subscription?

Posted in Security Architecture, Technology on Oct 19th, 2019

When I review an Azure environment one of the first things I check is who has the Owner role. Too often the list is long and includes consultants that left the project a long time ago. Owner in Azure is Tier 0 for your cloud. It can do anything, including giving itself and others even […]

Read Full Post »