The scope of work is to deliver the Cloud Detection & Response (CDR)/ Cloud Native Application Protection Platform (CNAPP) services using the Wiz CNAPP cloud native platform (Wiz CNAPP cloud).

The scope of work is to deliver the Cloud Detection & Response (CDR)/ Cloud Native Application Protection Platform (CNAPP) services using the Wiz CNAPP cloud native platform (Wiz CNAPP cloud). CNAPP is a convergence of 3 different capabilities, which provide the foundations for an effective Cloud Detection and Response (CDR) capability which SGN does not currently have. This brings together the following three areas: Cloud Security Posture Management (CSPM) CSPM continuously monitors, identifies, alerts on, and remediates compliance risks and misconfigurations in cloud environments. Cloud misconfigurations are often exploited by threat actors. CSPM systems monitor cloud assets, then continually and automatically check for cloud misconfigurations that may result in data breaches. Cloud environments can be extremely complicated, and mistakes can be very hard to detect and manually Cloud Infrastructure Entitlements Management (CIEM) Monitors human and service identities; effective permissions; and exposed secrets across cloud environments. CIEM continuously analyses risk and generates least privilege access policies to efficiently remove any unused, risky, or excessive privileges. This mitigates the risk of escalation of privilege, lateral movement and ultimately data breaches in the cloud. IT currently does not have this level of visibility onto cloud permissions and identities. Cloud Workload Protection (CWP) CWP’s monitor workloads in the cloud, scan for vulnerabilities and provide information regarding those vulnerabilities. The Pricing Model for the SGN CDR/CNAPP solution and service is based on a combination of the service elements requested by SGN. The basis of pricing is outlined below and tailored to meet SGN’s requirements.