Cloud Security & Cost Governance
- Cloud (infrastructure-as-a-service) environments are managed with active cost governance, monitoring, and controls.
- Endpoint detection and response coverage extends to cloud compute instances.
- Public-facing, cloud-hosted applications are isolated from the internal production network.
- Data-residency options are used where available to keep customer data within its region.
Framework Alignment: NIST CSF PR.IR, ID.AM; CIS Control 12, 15; GDPR Art. 32, 44-46; ISO 27001:2022 A.5.23
