Ollion's landing zone is built based on our deep industry based and battle tested understanding of compliance guidelines and cloud providers' best practices. Regulatory frameworks require an enterprise to have a clear separation of duties that provides maker/checker coverage, operating environment segmentation as well as a clear workflow to provision and manage cloud infrastructure. The Ollion landing zone is designed specifically to meet these needs for companies in the heavily regulated space with both built-in compartmentalisation and demonstrable compliance against cloud provider best practices.

The landing zone has a clear segregation of duties through network compartments in which you can place your tooling and management processes:

1. Security Operations, Monitoring and Logging
2. Technology Operations, Monitoring and Logging
3. Audit Operations, Monitoring and Logging
4. Security Posture Management
5. Organisation Secrets
6. Billing and FinOps
7. Infrastructure Provisioning Pipeline
8. High-Trust Network Interconnect (inter compartment and whitelisted offsite & VPN)
9. Low-Trust Network Interconnect (inter department and LZ workload)
10. No-Trust Network Interconnect (internet and third party)
11. DNS Hub
12. Network Hub

The landing zone provides:

• 100% pass for AWS Foundational Security Best Practices v1.0.0,
• 100% pass for CIS AWS Foundations Benchmark v1.4.0,
• 100% pass for NIST Special Publication 800-53 Revision 5,
• 100% pass for PCI DSS v3.2.1.

Lastly, the client will receive the following reports to inform their decision to deploy:

• Pre-deployment QA best practice report
• Pre-deployment regulatory compliance report

and post deployment:

• Post-deployment QA best practice assurance report
• Post-deployment regulatory compliance report