01 · 2025 · Academic cloud security architecture projectDeployed
Cloud Security Framework — CivicNexus
- Problem
- A smart-city platform with its database open to 0.0.0.0/0, unencrypted volumes, and no MFA or logging.
- AWS services
- VPCSecurity GroupsIAM + MFAKMSCloudTrailCloudWatch
- Result
- Two Critical (score 9) risks treated down to Low; controls mapped to 8 ISO 27001 Annex A domains.