In the cloud, identities and configurations are the new perimeter.
Cloud services accelerate work, but introduce specific risks: unprotected privileged accounts, public shares, uncontrolled authorized applications, insufficient logs and unclear responsibilities. The service checks the real posture without assuming that the default settings are appropriate for the context.
Areas of verification
- Microsoft 365 tenants, Google Workspace, and critical SaaS platforms;
- MFA, conditional access and authentication methods;
- administrative roles, emergency accounts and inactive identities;
- OAuth applications, integrations and consents granted;
- external shares, public links and data classification;
- audit log, retention, alert and integration with SIEM or SOC;
- mail security, mailbox rules and legacy protocols;
- SaaS data backup and recovery capabilities.
Method
The analysis combines configuration collection, privilege review, event verification, and comparison with organizational requirements. The recommendations consider usability, available licenses and impact on processes, so as to avoid theoretical or non-applicable controls.
Deliveries
A technical report, exposure summary, target configuration and roadmap are provided. Upon request, NESQ supports the implementation and subsequently verifies that the changes have produced the expected result.