...

The five core controls of Cyber Essentials will help protect your organisation’s data and services from the most common cyber attack approaches. The five controls do need to be applied to all cloud servicesThis includes all the cloud services that your organisation uses. Why is this? Surely, we can rely on Google, Microsoft, Amazon or whoever is the cloud service provider is to can take care of security? Many cloud providers do ensure the security controls are in place but the user often has to set up some of the controls themselves.

...

The huge control panels within the admin centre for a cloud service in Microsoft or Google can be a daunting prospect, and anyone setting up accounts will need to set role assignments, groups and permissions to each account as well as passwords and multi-factor authentication.  This is the same whether you are a large enterprise or a micro business and therefore expert guidance in configuring these settings may be a necessitynecessary.

 Small businesses that have not fully or correctly configured their cloud service accounts can be easy prey for attackers and this makes them high risk for contracts within supply chains.

...