Home › Services › Cloud security
Cloud security services in Nairobi, Kenya
Moving email, files and systems to the cloud does not make them secure by default. A large share of cloud incidents result from misconfiguration: accounts without multi-factor authentication, publicly exposed storage, or former administrators who retain access. APOPS Assurance identifies and remediates these weaknesses before they can be exploited.
What we secure
- Microsoft 365 and Google Workspace: sign-in, MFA, mailbox and sharing settings, data loss prevention
- Azure, AWS and Google Cloud: identities and roles, networks, storage, keys and logging
- Identity: single sign-on, conditional access, privileged accounts and joiner-mover-leaver controls
- Backup of cloud data, tested restores and ransomware protection
- Encryption and key management for sensitive data
- Monitoring of cloud accounts for suspicious activity
Cloud security review
A fixed-scope review of your cloud tenants against recognised benchmarks, with a prioritised remediation plan. We can implement the changes with your IT team and verify them afterwards.
Data protection in the cloud
If your data is hosted in a cloud region outside Kenya, the Data Protection Act, 2019 sets conditions for cross-border transfers. We help you document where your data is, why, and what safeguards apply.
Why APOPS Assurance
- Established in Nairobi in 2016 as Angstrompal Ventures and incorporated as APOPS Assurance Ltd in 2026, serving organisations across Kenya
- IT audit, cybersecurity and compliance delivered by one team, so findings, remediation and monitoring stay connected
- Our team holds CISA, CISM, CISSP, CEH and ISO/IEC 27001 Lead Auditor certifications
- Clear written proposals, signed confidentiality agreements and a follow-up review after every engagement
Frequently asked questions
Is Microsoft 365 secure out of the box?
It has strong security features, but many are not switched on by default. Multi-factor authentication, admin role limits and external sharing settings are the first things we check.
Can our data be stored outside Kenya?
Often yes, but some data and sectors have conditions. We help you assess the transfer, record the safeguards and meet your obligations under the Data Protection Act.
Do you work with AWS and Google Cloud too?
Yes. We review and harden Microsoft, Amazon and Google cloud environments, and hybrid set-ups that mix cloud and on-premises servers.
Talk to us
Call +254 722 102 317, email info@apopsassurance.com or visit us at Kimathi House, Kimathi Street, Nairobi.