Security Services

Security Services typically includes:

• ✓Cloud security architecture and design
• ✓Identity and access management support
• ✓Network security and segmentation
• ✓Security monitoring and threat detection
• ✓Vulnerability assessment and remediation support
• ✓Security configuration and hardening
• ✓Compliance and audit support
• ✓Security incident response and investigation

Security Services support the protection of backup and recovery systems to ensure that data remains secure and recoverable during incidents. This includes ensuring that backups are protected against unauthorised access, tampering, or ransomware, and that recovery processes are tested and secured. Security controls are applied to backup storage, access policies, and recovery workflows. Where required, guidance is provided on immutable backups, separation of duties, and secure recovery environments to reduce the impact of security incidents.

Security Services must operate within the technical and regulatory constraints of the underlying cloud platforms. Some security controls may be limited by platform capabilities or legacy application design. Changes to security configurations follow controlled change management processes to avoid service disruption. Emergency security actions may be taken to mitigate active threats. The service is typically delivered remotely.

Service levels define how security events are handled, including: • Monitoring coverage and alerting • Incident response times based on severity • Escalation and communication procedures Security monitoring operates continuously, and incidents are managed through defined response processes. Post-incident reviews are conducted to identify root causes and improvement actions.

Ongoing security support includes continuous monitoring, regular reviews of security posture, and proactive recommendations for improvement. This may include policy updates, control tuning, and support for new services or changes in the environment. The service also supports audits, regulatory assessments, and compliance reporting as required.

• Integration with identity systems
• Access to logs and monitoring data
• Visibility into network and application configurations
• Collaboration with operational and development teams
• All access is controlled, monitored, and reviewed.

Security changes are planned and tested to minimise operational impact. Where security actions may affect availability, stakeholders are informed in advance. In the event of a security-related outage, response actions prioritise containment, recovery, and restoration of services, followed by investigation and reporting.

Security Services support cloud environments hosted across public, private, and hybrid infrastructures. Security controls are designed to align with data residency and regulatory requirements in different regions.

Security logs, reports, and configurations are provided to the customer upon exit. Access credentials are revoked, and retained security data is returned or securely deleted in line with contractual and regulatory requirements.