10/13/2026
Running cloud infrastructure in a regulated industry means answering to two audiences: your architecture review, and your auditor.
A provider’s compliance attestation covers the provider. Your configuration, your access model and your monitoring stay yours.
Josh Mahar, VP of Cloud, Infrastructure and Security, has written a guide to the decisions that boundary forces. Giving every requirement a control owner, an evidence source and a retention period. Establishing identity, networking, logging and backup before any workload arrives. Enforcing approved configurations in the pipeline so governance does not quietly drift.
Written for healthcare, financial services, and anywhere sign-off comes from legal and risk as well as IT.
Read the full piece: https://hubs.ly/Q04B3htM0
Learn how to build secure, compliant cloud architecture for regulated industries with practical guidance on governance, data sovereignty, DR, and more.