> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.woho.solutions/llms.txt
> Use this file to discover all available pages before exploring further.

# Cloud Security

> Protect your cloud workloads with layered security controls, continuous monitoring, and expert guidance from WOHO Solutions.

## Security That Scales with Your Cloud

Moving to the cloud introduces powerful new capabilities — but also new security considerations. WOHO Solutions delivers a comprehensive cloud security practice that protects your data, applications, and infrastructure at every layer, without slowing down your business.

Our approach combines industry best practices, leading security tooling, and deep expertise to keep your environment secure and compliant.

## The Shared Responsibility Model

<Info>
  In cloud computing, security is a **shared responsibility** between the cloud provider and the customer. Understanding who is responsible for what is the foundation of an effective cloud security strategy.
</Info>

| Responsibility                   | Cloud Provider | Your Organisation (with WOHO) |
| -------------------------------- | -------------- | ----------------------------- |
| Physical data-centre security    | Yes            | --                            |
| Network infrastructure           | Yes            | --                            |
| Hypervisor & host OS             | Yes            | --                            |
| Operating system patching        | --             | Yes                           |
| Application security             | --             | Yes                           |
| Identity & access management     | --             | Yes                           |
| Data classification & encryption | --             | Yes                           |
| Compliance & governance          | --             | Yes                           |

WOHO takes ownership of your side of the shared responsibility model, implementing and managing the controls that keep your workloads safe.

## Identity & Access Management (IAM)

Strong identity governance is the cornerstone of cloud security. We implement:

* **Least-privilege access** — Users and services receive only the permissions they need, nothing more.
* **Multi-factor authentication (MFA)** — Enforce MFA across all administrative and sensitive accounts.
* **Role-based access control (RBAC)** — Define roles that map to job functions, simplifying permission management at scale.
* **Privileged access management** — Secure, audit, and time-limit access for administrative accounts.
* **Single sign-on (SSO)** — Centralise authentication to reduce password fatigue and improve security posture.

<Tip>
  Misconfigured IAM policies are the **number-one cause** of cloud security breaches. A regular access review — at least quarterly — dramatically reduces this risk.
</Tip>

## Encryption

WOHO ensures your data is encrypted throughout its lifecycle.

<CardGroup cols={2}>
  <Card title="Encryption at Rest" icon="lock">
    All stored data is encrypted using AES-256. Customer-managed encryption keys (CMEK) are available for organisations that require full key control.
  </Card>

  <Card title="Encryption in Transit" icon="lock-keyhole">
    All data moving between services, regions, and end users is protected with TLS 1.2 or higher, preventing interception and tampering.
  </Card>
</CardGroup>

## Threat Detection & Response

<Steps>
  <Step title="Continuous Monitoring">
    Security telemetry from cloud services, virtual machines, containers, and applications is collected and centralised in a Security Information and Event Management (SIEM) platform.
  </Step>

  <Step title="Automated Threat Detection">
    Machine-learning-driven analytics and curated detection rules identify suspicious activity — from brute-force attempts to anomalous data exfiltration — in near real-time.
  </Step>

  <Step title="Alerting & Triage">
    High-fidelity alerts are routed to the appropriate team with full context, reducing mean time to acknowledge (MTTA) and eliminating alert fatigue.
  </Step>

  <Step title="Incident Response">
    Predefined playbooks guide rapid containment, investigation, and remediation. Post-incident reviews drive continuous improvement of your security posture.
  </Step>
</Steps>

## Endpoint & Workload Protection

WOHO partners with **Bitdefender**, a global leader in cybersecurity, to deliver advanced endpoint and workload protection for your cloud and hybrid environments.

<Card title="Bitdefender Endpoint Security" icon="shield" href="/partners/bitdefender/overview">
  Learn how our Bitdefender partnership provides multi-layered endpoint defence, anti-ransomware, and centralised security management for your organisation.
</Card>

## Compliance & Governance

* **Policy-as-code** — Enforce security and compliance policies automatically using infrastructure-as-code guardrails.
* **Continuous compliance scanning** — Detect configuration drift and non-compliant resources before they become vulnerabilities.
* **Audit-ready reporting** — Generate compliance reports aligned to frameworks such as the Mauritius Data Protection Act, GDPR, ISO 27001, and CIS Benchmarks.

<Note>
  Need a security assessment of your current cloud environment? Contact us at **[hello@woho.solutions](mailto:hello@woho.solutions)** or call **+230 615 6906** to arrange a review.
</Note>