Everything you want to know about cloud but are too afraid to ask

Cloud technology enables innovation – but only if it's implemented securely, cost-effectively and with governance in mind.

By focusing on cloud security, cost optimisation and governance, and making full use of modern services like M365 and Azure, organisations can stay secure, compliant and ahead of future challenges.

Successfully migrating to cloud

It’s essential to plan a move from on-premises infrastructure to the cloud carefully, but it doesn’t have to be overwhelming. Get ahead by:

• Mapping out applications, workloads and inter-dependencies before starting
• Decide whether to lift-and-shift, modernise or rebuild systems based on business needs
• Use hybrid cloud services like Azure Stack or Azure Arc if full migration isn’t immediately viable
• Develop skills in advance - get your IT team trained and ready for a cloud-first environment

We can support your VMware to cloud migrations, on-premises to public cloud transitions and even end-user desktop migrations through Azure Virtual Desktop.

Strengthening cloud security

Cloud providers like AWS, Microsoft Azure and Google Cloud invest heavily in security, but the shared responsibility model means your organisation is still responsible for securing its own data, identities and configurations.

You can strengthen your security by:

• Using identity and access management (IAM): implement strict access controls, enforce conditional access and deploy multi-factor authentication (MFA) using services like Microsoft Entra
• Maximising your data protection: encrypt data both at rest and in transit. Consider using customer-managed keys (CMK) for additional control
• Applying continuous monitoring: use cloud-native security tools like Microsoft Defender for Cloud and AWS Security Hub to detect and respond to threats early

Explore our cloud security reviews to see how we are helping organisations to assess risks, build resilience and align with best practice security frameworks.

Compliance and data governance in the cloud

Cloud platforms offer powerful governance and compliance tools – but they must be configured correctly to be effective.

• Data classification and labelling: understand where sensitive data lives and control access to it appropriately
• Lifecycle management: implement data retention and deletion policies across M365 and cloud storage
• Audit and compliance monitoring: audit your environment regularly to check for compliance gaps and risky behaviour

Our cloud professional services team offers support around data governance frameworks to help you manage sensitive data responsibly and meet your sector-specific compliance needs.

Improving security posture and Microsoft secure score

Security posture management is crucial for protecting cloud environments against evolving threats. Strengthen your security posture by:

• Use industry best practice baselines for services like Azure, M365 and Intune
• Regularly review Microsoft Secure Score and prioritise actions that offer the greatest risk reduction
• Move beyond SMS-based MFA to phishing-resistant options like FIDO2 security keys
• Protect access based on risk level, user location, device compliance and sign-in behaviour

Our expert cloud consultants can support you in improving security maturity and meeting Cyber Essentials or Cyber Essentials Plus standards.

Keeping public cloud costs under control

Public cloud isn't automatically cheaper. Without good governance, costs can quickly spiral out of control.

There are many ways to keep cloud costs affordable, including:

• Adopting FinOps principles: treat cloud costs like a shared business responsibility, not just an IT concern
• Regularly adjust resources based on actual usage patterns to avoid over-provisioning
• Set budgets and alerts using cloud-native cost management tools to track spending in real time
• Use reserved instances and savings plans to commit to long-term usage where appropriate, and to secure discounts
• Auto-scale and shutdown schedules - only pay for what you use, when you need it

Our Cloud FinOps Service provides tailored advice and tools to optimise your cloud spend and prevent unnecessary overspending.

Maximising M365 and Intune

Many organisations do not use all M365 and Intune capabilities. This means they miss out on major security and management benefits that are already included in their licensing.

Look for these quick-wins to maximise M365 and Intune:

• Security tools: activate services like Microsoft Defender for Identity, Safe Links and Safe Attachments
• Use Intune for policy-based management across Windows, iOS, Android, and macOS devices.
• Apply conditional access and zero trust: enforce access decisions based on real-time risk factors
• Data loss prevention (DLP): protect sensitive information from accidental or unauthorised sharing

We can help you unlock the full potential of your existing M365 licensing to improve security, collaboration and efficiency.

Modernising telephony and communications in the cloud

With hybrid working becoming the norm, cloud-based telephony systems are a smart move. There are many benefits to cloud telephony, including:

• Flexibility - easily scale up or down based on demand
• Unified communications - integrate voice, video and messaging through platforms like Microsoft Teams
• Reduced costs - eliminate the need for expensive on-premises private branch exchange (PBX) systems

Our advice on modernising telephony and optimising collaboration tools is helping organisations like yours adapt to today’s work environments. Explore session border controller for more information.

Further support

Explore our a wide range of cloud services to help education, research, and public sector organisations thrive in the cloud.

Want to stay ahead in the world of cloud? Join the Jisc cloud community to connect with peers, access expert advice and get the latest insights into cloud best practices, security and cost management.

If you are a Jisc member, contact your relationship manager for further details about any aspect of cloud. For more information, make a customer enquiry using our form or email us at customer.support@jisc.ac.uk.