VIGIA - Cloud Security

VIGIA Cloud Security CSP CSPM, Threat Detection, and Automated Response for Azure and Multi-Cloud Environments Organizations adopting cloud services require security controls, monitoring, and visibility capabilities to manage and secure Azure and multi-cloud environments. VIGIA Cloud Security CSP is a professional services engagement that helps customers implement, configure, and extend their use of Microsoft Azure security technologies, including Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Azure Monitor, and Log Analytics Workspace. The engagement provides implementation services, technical expertise, knowledge transfer, and operational guidance to support the deployment of security controls, CSPM capabilities, workload protection, monitoring, and detection and response services across Azure environments. What Is Included Assessment and Environment Readiness Assessment of the existing Azure environment to validate foundational security requirements, including: Azure RBAC with least privilege. Microsoft Defender for Cloud CSPM Baseline. NSG and network security baseline. Audit log integration with Azure Monitor and Log Analytics Workspace. CSP-0 | Foundation Implementation of foundational governance and security controls, including: Management Groups hierarchy based on CAF. Azure Policy aligned with MCSB. Managed Identity implementation. Least-privilege RBAC. Centralized Log Analytics Workspace. Estimated Effort: 120 hours | 3 weeks CSP-1 | Visibility Implementation of cloud security visibility capabilities, including: Microsoft Defender for Cloud configuration. Secure Score baseline. Asset inventory. SIEM alert export configuration. Estimated Effort: 80 hours | 2 weeks CSP-2 | Hardening Implementation of workload and infrastructure protection controls, including: Defender for Cloud workload protection. Just-In-Time VM Access. Network hardening. File Integrity Monitoring. Compliance dashboards aligned with ISO 27001 and CIS Azure Benchmark. Secure Landing Zone (CAF Enterprise Scale). Private Endpoints for critical PaaS services. Azure Firewall Premium with IDPS. WAF v2 in Prevention mode. Estimated Effort: 168 hours | 6 weeks CSP-3 | Guardian Implementation of advanced detection and response capabilities, including: Microsoft Sentinel SIEM/SOAR. Automated response playbooks. Attack Path Analysis. Automated remediation. Multi-cloud CSPM capabilities. Confidential Computing. Cloud detection and response through Sentinel. CIS Azure Level 2 assessment and remediation. AWS and GCP integration through Defender for Cloud CSPM. Estimated Effort: 300 hours | 12 weeks Knowledge Transfer Training and operational guidance for customer teams responsible for administering and maintaining the implemented security controls and Microsoft security technologies. Optional Managed Services Optional managed services are available to support the ongoing operation of the deployed security controls and monitoring capabilities. Additional Information Microsoft licensing and platform services are billed separately. Licensing costs depend on environment size and platform consumption. Refactoring of existing applications or infrastructure is not included in the scope of this engagement.