AI-Native Consulting

Infrastructure Solutions

Move, modernize and run

Microsoft Solutions

AWS

Infrastructure Services

Data Center Migration

Business Resilience

Keep the business running

Business Continuity

IT Disaster Recovery

Crisis Management

Cyber Security

Managed Services

Co-managed, not outsourced

Home/AWS/AWS Security and Resilience

AWS Security and Resilience

Could we prove our AWS is secure, and recover it if it isn't?

For CISO, CIO, chief risk officer, business continuity lead

Talk to us about thisHow it works
First, you receiveAssessSecurity and resilience risk register · Compliance gap report · Prioritized remediation plan
Timing and scopeAssess: fixed fee. Build: fixed scope. Run: optional, monthly.
What happens nextA written recommendation. If you proceed, a scoped proposal for the next stage.

Under the AWS shared responsibility model, AWS secures the cloud and you secure what runs in it. We assess your security posture, compliance controls and recovery capability, then build the controls, the audit evidence and an isolated recovery account with immutable backups, and prove it works with a recovery drill. The work draws on Kalosys's cybersecurity and business resilience practices. You get controls you can show an auditor and recovery you have tested rather than assumed.

How we work

What we do

Open a step to see what happens and what you receive.

Assess

Fixed fee.

  • Security posture review with AWS Security Hub and GuardDuty
  • IAM least-privilege and encryption review
  • Control mapping to CIS, NIST CSF 2.0, HIPAA or PCI DSS
  • Backup and recovery gaps against your recovery time and recovery point objectives (RTO and RPO)

You receive: a security and resilience risk register, a compliance gap report and a prioritized remediation plan.

Confirmed at scoping.

Build

Fixed scope with milestones.

  • Security baseline and encryption standards, with a findings triage process for your team
  • AWS Config conformance packs and Audit Manager evidence
  • AWS Backup policies and AWS Elastic Disaster Recovery
  • Isolated recovery account with immutable, logically air-gapped backup vaults
  • Clean-room restore and a recovery drill

You receive: controls and runbooks, an audit evidence plan and a recovery test report.

Confirmed at scoping.

Run

Optional. If you want us to, we can keep this going monthly for as long as you need it.

  • Monthly security posture reporting
  • Scheduled recovery drills
  • Evidence refresh before audits

You receive: a monthly posture report and drill results for your auditors, through Managed AWS Operations at Premium level.

Services included: Security Baseline and Posture, Compliance Alignment, Backup and Disaster Recovery, Cyber Recovery and Ransomware Resilience.

Want to know what this would look like for you?About 30 minutes with a practitioner from the practice that does the work. You’ll leave with a clear view of your next step.

Book a 30-minute conversation

Outcomes

What you can expect

Implementation

  • Controls you can show an auditor
  • Recovery that is tested, not assumed
  • Backup copies isolated from production and protected by retention locks, with restores tested

Is this right for you?

Tick what sounds familiar

Select the needs that apply. We’ll collect them here so you can review the fit.

DeliverablesDeliverables by phase (7)

Assess

  • Security and resilience risk register
  • Compliance gap report
  • Prioritized remediation plan

Build

  • Controls and runbooks
  • Audit evidence plan
  • Recovery test report

Run (optional)

  • Monthly posture report and drill results (optional Run)

Good to know

Questions leaders ask

Which frameworks do you map to?

Commonly CIS, NIST CSF 2.0, HIPAA and PCI DSS, using AWS Config conformance packs and Audit Manager. Whether that makes you compliant is your compliance team's decision; the work produces the controls and evidence to support it.

What is an immutable backup?

A backup that cannot be changed or deleted before its retention period ends, even by an administrator.

Do you test recovery?

Yes. The build ends with a recovery drill, and the optional Premium run service includes scheduled drills.

We use AWS Backup already.

That is a good foundation. The gap is usually where backups sit and who can delete them. We add an isolated recovery account, immutable vaults and a tested restore.

AWS is secure, so aren't we covered?

AWS secures its infrastructure. Identities, configurations, data and applications are your side of the shared responsibility model.

Why it matters nowThe numbers behind this
$10.22Maverage cost of a data breach for US organizations, a record high in the 2025 report (Source: IBM Cost of a Data Breach Report 2025, Ponemon Institute)
94%of organizations hit by ransomware saw attackers try to compromise their backups (Source: Sophos survey of 2,974 IT and security professionals, March 2024)

Related offerings

Often paired with

AWS Landing Zone and Foundation

“We're building in AWS without a foundation.”A secure, governed multi-account AWS environment that every later workload lands in. Learn more

Managed AWS Operations

“Who looks after our AWS after go-live, including out of hours?”An optional monthly service for organizations that want help running AWS after go-live. Learn more

AWS Readiness and Architecture Review

“Is our AWS built right, and are we ready for what's next?”A short, fixed-fee review that tells you where your AWS environment stands and what to do next. Learn more

Talk with our team

Talk to us about AWS Security and Resilience

Tell us the decision, deadline or problem in front of you.

  1. A reply from the practice that does the workThe practitioners who would deliver it.
  2. A short conversationWhat needs to happen, and by when.
  3. A written proposalWhat you would receive, how long it takes and the fee, before you commit.

No cost, no obligation.

Loading the form…

Prefer to ask now?