Securing Cloud Services: A pragmatic guide

From Cloud Adoption to Cohesive Security

Moving enterprise workloads to the cloud is rarely a simple lift-and-shift exercise. The benefits are real—flexible infrastructure, improved resilience, faster patching, and automation—but without a structured security approach, organisations can easily introduce new risks. Lee Newcombe’s Securing Cloud Services: A pragmatic guide tackles that challenge head-on. Rather than another technical how-to manual, this book provides a conceptual framework that helps security leaders, architects, and IT decision-makers align cloud security with broader enterprise risk management.

A Security Reference Model for IaaS, PaaS, SaaS, and FaaS

The book introduces a Security Reference Model (SRM) that breaks down security into distinct services—identity management, access control, threat detection, and more—and shows how those services can be delivered across different cloud service models. Newcombe applies the SRM to Infrastructure as a Service, Platform as a Service, Software as a Service, and the newer Function as a Service model. This consistent approach makes it possible to compare security responsibilities across providers and deployment models without being tied to a single vendor’s terminology.

What the Book Covers

The content is organised into three parts. Part one sets the scene with cloud computing concepts, deployment models, the security balance of cloud adoption, and major threat actors. It also addresses privacy and regulatory concerns such as data protection and payment card industry requirements. Part two moves into practice, covering security architecture fundamentals and the detailed application of the SRM to each cloud service model. Part three closes with a forward-looking view of enterprise and cybersecurity perspectives.

Who Should Read This Ebook

This is not a hands-on technical reference for developers looking for code snippets or configuration walkthroughs. Instead, it is aimed at senior IT and security professionals who need to make informed decisions about cloud adoption and governance. CIOs, CISOs, security architects, risk managers, and enterprise architects will find the pragmatic, business-aligned approach especially valuable. The book intentionally focuses on enterprise cloud services rather than consumer platforms.

A Pragmatic, Vendor-Neutral Perspective

One of the book’s strengths is its practical, non-dogmatic tone. Newcombe acknowledges that security is about balancing risk and reward, not chasing perfection. The second edition updates the material for 2020 and beyond, reflecting changes in cloud services, security practices, and regulatory expectations. For organisations struggling to maintain a consistent security posture across on-premises and cloud environments, this guide offers a clear path forward.