Cloud and Architecture

Cloud technology has transformed how Norwegian and European organisations build, operate and scale their services. Accountability, however, does not transfer to the provider: the board and executive team remain responsible for ensuring that data is handled properly, that the supply chain is under control, and that the requirements of NIS2, the GDPR and ISO/IEC 27001 are met, regardless of where the infrastructure runs.

Berigo helps organisations adopt the cloud in a controlled and secure manner. We treat cloud security and architecture as a management discipline, not merely a technical choice. Decisions about platforms, data location and vendor dependency shape an organisation's risk profile for years to come. Questions of European data sovereignty, such as where data is stored, which jurisdiction the provider is subject to, and what realistic exit options exist, therefore belong in the boardroom, not only in the IT department.

What we deliver

• Secure cloud adoption: strategy and governance for the move to cloud, with clear security requirements, roles and responsibilities defined before migration begins.
• Architecture reviews: independent assessment of existing or planned architectures, focusing on identity and access management, segmentation, encryption, logging and resilience.
• Data sovereignty and regulatory positioning: assessment of data location, third-country transfers and provider jurisdiction against the GDPR and sector-specific requirements.
• Vendor and exit strategy: analysis of dependency on individual providers, contractual requirements and realistic plans for switching providers or repatriating services.
• Anchoring in the management system: cloud controls are mapped to ISO/IEC 27001 and the requirements of NIS2, so that compliance can be documented, measured and audited.

Who this is for

This service is designed for organisations planning or already undertaking a cloud journey: executive teams deciding on platform strategy, entities within the scope of NIS2 that must demonstrate governance of ICT suppliers, and organisations seeking an independent assessment of architectural choices before major investments. We work as readily with boards and executive teams as with architects and operations. In our experience, results come when technology, people and governance are seen as a whole.

How an engagement starts

An engagement typically begins with a no-obligation conversation to clarify objectives, regulatory context and maturity. We then carry out a focused review of the current architecture, data flows and vendor landscape, and deliver a prioritised set of recommendations that management can act on. The scope is tailored to your situation, from a brief second opinion to longer engagements with advisory support throughout the cloud journey. Contact us for an initial conversation.