ISO 27001 in 24 Weeks: Securing 3 PB of Video for a Global Streaming Platform

The Challenge

‍Advertisers froze renewals until ISO 27001 proof arrived. First scan found 4 100 public buckets/snapshots and 632 high-risk misconfigs.

The Solution

1. Automated multi-cloud inventory mapped 12 700 resources (36 h).
2. 180 Terraform PRs closed 83 % of risk; owners approved residual fixes.
3. Two mock audits (Weeks 8 & 16) captured likely questions, pre-approved answers.
4. CloudTrail, AWS Config & GCP Audit Logs archived to WORM storage; auditor package exported in one click.
5. Final audit raised 3 medium findings; all closed inside the 14-day window.

Technology Used
Terraform · AWS Config · Amazon Athena/Lake Formation (WORM) · GCP Audit Logs

Key Results

• Critical misconfigs 632 → 0
• ISO 27001 granted on 2nd review
• USD 32 M advertising revenue safeguarded

“Advsec’s dry-run audits meant ‍ when the real auditors arrived.” - VP Operations