When it comes to deploying business applications, my recommendation is to use cloud of your choice, especially if you are small and medium business. Cloud services will help you reduce your to time to market, abstract complexity of managing hardware and help with incremental cost control (than purchasing a server and managing it). However, they make it so easy that you may some basic security controls.
Below are few things to consider so you can implement better security controls and peace of mind.
Ensure you enable MFA from the get go. I recommend using either passkeys or Authentication apps wherever possible instead of email/phone.
Implement global level policies so any resources (servers, storage buckets etc.) created are not accessible from internet. Enabling access to any service over the internet should be a deliberate effort.
Implement encryption for both at rest and in transit.
Do not enable RDP/SSH publicly accessible as much as possible. You can enable bastion services or implement VPN and restrict accesss to the services only via VPN.
Enable monitoring tools. These may cost little bit, but they would help you get real-time alerts and to prevent potential breaches.
Review users/access periodically. If a user did not login for over 3 months, you should consider locking.
By focusing on these key areas, you can significantly enhance your security posture. It not only protects your Organization but also builds trust with your customers.
Don't be complacent. Stay Safe!
Need Expert Guidance?
At Moda Experts, we specialize in Cyber Security and IT Cost Containment for small and medium businesses. Please reach out to secure your business from cyber threats and convert IT spend into strategic investments.
Comments