乐鱼（Leyu）体育官网

2. Design phase聽

Setting up the basic cloud foundation structure

We got to work setting up a structure that would support the more basic cloud foundation needed in the short term, and provide a strong foundation for a fully enabled, production-ready migration factory.

Security was among the top priorities. We reviewed baseline security controls and provided a framework that encompasses leading practices based on standards developed by the National Institute of Standards and Technology (NIST), the聽Center for Internet Security (CIS), and the cyber security experience and insights 乐鱼（Leyu）体育官网 has developed working with numerous clients.

Security controls must be closely aligned to an organization鈥檚 needs. Developing them from the ground up can be time-consuming. However, 乐鱼（Leyu）体育官网 has defined and continuously refines more than 100 Google Cloud security controls. Drawing from this robust library of predefined controls, and employing the聽MoSCoW prioritization method (must-have, should-have, could-have, and would-have), we were able to rapidly align a precise set of controls to the Israeli government鈥檚 security standards, requirements, and framework. This included enabling Single Sign-On (SSO) and聽Multifactor Authentication (MFA) using Google Cloud.

We also established a resource hierarchy (folders/projects) and centralized billing, enabled a role-based model to enforce separation of duties and management of privileged access, and provided and end-to-end and observable network topology to help ensure secure connectivity between platforms, services, and users.

4. Validation and hypercare phase

Helping to ensure a smooth landing for the pilot and subsequent migrations

As with all phases of the project, this last one required creativity to meet the aggressive timeline without sacrificing capabilities or performance.

Validation

Typically, 乐鱼（Leyu）体育官网 would validate all security baseline controls for configuration and effectiveness and then share the results with our client. They would then validate the controls using their own criteria. This can be a time-consuming process. So, instead, we used a rolling approach鈥攃ompleting and validating one set of controls and handing it off to the government for review before proceeding to the next set. This allowed our two teams to work in tandem. Also, we provided the government with documented validation steps so they did not have to create their own鈥攆urther accelerating the process. Lastly, while we validated all controls for configuration, simulating all controls for effectiveness wasn鈥檛 feasible. Instead, we selected a subset and performed showbacks to demonstrate effectiveness. We followed similar validation processes for policies, groups, roles, etc.

Hypercare

Hypercare involved two go-lives. First, we conducted a soft launch involving all core cloud foundation capabilities that did not require internet access. This allowed the technical team to start using the provisional cloud foundation at the seven-week mark, providing ample time to test, validate, and report issues. We resolved these issues, added enhancements including internet access, and then completed the second go-live, confident that the cloud foundation MVP we had built would perform as planned and meet the government鈥檚 needs.