Cloud Permissions Firewall and ISO 27002 Controls

This document is a technical report detailing the Cloud Permissions Firewall from Sonrai Security and its alignment with various ISO 27002 controls. It outlines how the firewall addresses key areas such as Information Security Policies, Access Control, and Information Security Incident Management. The report describes specific implementations and monitoring processes that ensure compliance with ISO 27002 standards. For instance, it explains how the firewall automates the principle of least privilege, continuously adjusting access rights to ensure users have only the necessary permissions. Additionally, it discusses the management of authentication information, the collection of evidence for audit purposes, and the monitoring of sensitive permissions. The document emphasizes the importance of regular audits and real-time monitoring to maintain security and compliance. Overall, it presents a comprehensive view of how the Cloud Permissions Firewall can effectively support organizations in meeting their information security requirements.