We offer support in preparing organizations to meet the requirements resulting from the Polish Financial Supervision Authority (PFSA/UKNF) announcement regarding the processing of information by supervised entities in public or hybrid cloud computing.
As part of our services, we offer support in understanding these practical interpretations based on the experience and discussions conducted by PFSA with the FinTech sector and cloud service providers.
The work consists of three options, however, the first option should be treated as the base:
-
Preparation of necessary policies, procedures, and recommendations addressing the requirements resulting from the PFSA announcement,
-
Support in analyzing and adapting current cloud solutions (Microsoft Azure, Microsoft Office 365) to PFSA requirements,
-
Implementation of technical solutions in Microsoft Azure and Microsoft Office 365 services that enhance the security of these services and address requirements resulting from the audit report.
As part of the work performed, the necessary policies, procedures, and recommendations addressing the requirements resulting from the PFSA announcement will be prepared.
Related Terms
Learn key terms related to this article in our cybersecurity glossary:
- CSPM (Cloud Security Posture Management) — CSPM (Cloud Security Posture Management) is a category of cloud security tools…
- Cybersecurity — Cybersecurity is a collection of techniques, processes, and practices used to…
- Cybersecurity Incident Management — Cybersecurity incident management is the process of identifying, analyzing,…
- Cloud Environment Security — Cloud environment security refers to the technologies, procedures, policies,…
- Hybrid Cloud — Hybrid cloud is a cloud computing model that combines on-premises…
Learn More
Explore related articles in our knowledge base:
- Why is CIS Benchmarks compliance so critical for your AWS cloud security?
- AWS vs Azure vs Google Cloud - A comparison of public cloud leaders
Explore Our Services
📚 Read the complete guide: Cloud Security / AWS: Public cloud security - AWS, Azure, best practices
Need cybersecurity support? Check out:
- Security Audits - comprehensive security assessment
- Penetration Testing - identify vulnerabilities in your infrastructure
- SOC as a Service - 24/7 security monitoring
Cybersecurity for Your Industry
Learn more about cybersecurity in your industry:
Why this matters for organizations
Read the PFSA announcement on cloud processing. Learn what guidelines and recommendations apply to companies processing data in the cloud to ensure regulatory compliance. In the context of growing cyber threats and tightening regulations (NIS2, DORA), organizations must proactively manage this security area. Failure to implement adequate safeguards can lead to data breaches, financial penalties, and reputational damage.
Best practices for implementation
Effective implementation requires several key steps:
- Risk assessment and inventory — identify assets, threats, and vulnerabilities specific to your organization.
- Policy development — document requirements, roles, and responsibilities.
- Technical controls — deploy tools and configurations proportionate to identified risks.
- Training and awareness — engage employees in protecting organizational security.
- Monitoring and continuous improvement — regularly verify effectiveness and adapt to the evolving threat landscape.
