Glossary
Cloud terms, defined.
Short definitions for the language of regulated cloud work-written so engineers, risk and finance share one vocabulary.
- Landing zoneA reusable cloud foundation-accounts or subscriptions, identity, network, logging and policy-so new workloads inherit security and FinOps defaults instead of reinventing them.Definition
- FinOpsThe practice of making cloud spend visible, attributable and optimised-engineering and finance sharing ownership of cost decisions.Definition
- DORAThe EU Digital Operational Resilience Act-rules for ICT risk, incident handling, resilience testing and third-party oversight for financial entities.Definition
- SOC 2An attestation report on Trust Services Criteria (security and related criteria), issued by a licensed CPA firm-not by your consultancy.Definition
- ISO 27001An international standard for information security management systems (ISMS). Certificates are issued by accredited certification bodies after audit.Definition
- CSPMCloud Security Posture Management-tools that continuously check cloud configurations against security policies and known misconfigurations.Definition
- CNAPPCloud-Native Application Protection Platform-a product category combining posture, workload and often identity or data security scanning.Definition
- Multi-cloudRunning production workloads across more than one hyperscaler (for Stratoworks°: AWS, Azure and GCP) with consistent identity, logging and cost ownership.Definition
- Policy as codeExpressing security and compliance rules as versioned code that CI and cloud control planes evaluate automatically.Definition
- ICT riskRisk arising from information and communication technology-central to DORA and to any regulated cloud programme.Definition
- TerraformHashiCorp's infrastructure-as-code tool (and OpenTofu-compatible workflows) for declaring cloud resources as code with plans, state and modules.Definition
- DSPMData Security Posture Management-tools and practices that discover sensitive data in cloud stores, classify it, and flag exposure or policy gaps.Definition
- CIEMCloud Infrastructure Entitlement Management-continuous analysis of cloud identities and permissions to find excessive privilege and toxic combinations.Definition
- Quick AssessmentStratoworks°'s fixed-price €499.99, one-week review of cloud spend, security posture and architecture across AWS, Azure and GCP with a prioritised remediation roadmap.Definition