Security architecture and cloud security
Architecture reviews, identity design and cloud security for public, private and sovereign cloud platforms.
Most security incidents trace back to architecture decisions: flat networks, standing administrator rights, identities that outlive the people who held them. We review existing estates and design target architectures for identity, network, data protection and logging, with a migration path that operations can follow.
In the cloud we work on landing zones, configuration baselines and key management across the major providers and sovereign cloud offerings. Where customers or regulators ask for evidence, we work with the BSI C5 criteria catalogue. In German healthcare, § 393 SGB V has required a C5 Type 2 attestation for cloud processing of health data since 1 July 2025, and we help both providers and users of such services prepare for it.
Typical deliverables
- Security architecture review with prioritised findings
- Target architecture for identity, privileged access and segmentation
- Cloud landing zone security baseline and key management concept
- BSI C5 readiness assessment and control mapping
Talk to us about your security priorities
Tell us about your organisation, the regulations that apply to you and what you need to achieve, and we will come back to you to arrange a confidential first call. Email contact@alpwacht.com. If you are dealing with an active incident, say so in the subject line.
contact@alpwacht.com