Skip to content
IDMX

Cloud security, AI governance and security architecture

Security architecture that turns risk into practical action.

IDMX provides senior cybersecurity advisory, cloud-security architecture, and AI-governance support for organisations that need clearer security decisions, stronger controls, and measurable improvement.

For AWS, hybrid-cloud, and AI-enabled environments.

Discuss an engagementView services

Led by Michael Medenblik, Chief Security Architect and Deputy CISO, with more than 15 years across identity, cloud security, governance, vulnerability management, and security automation.

Visibility, control, and one decision point

The problem

When security complexity is outpacing control

Organisations often have the tools, the policies, and the cloud platforms — and still lack the operating model, the architecture, and the evidence to manage risk with confidence.

  1. 01

    A cloud strategy that still lets engineering ship

    A practical AWS and hybrid-cloud security architecture — identity, logging, vulnerability management, and resilience — without turning every change into a gate.

  2. 02

    Exposure that executives can actually decide on

    Technical findings translated into business impact, owners, and a sequence of work. Not another undifferentiated list of alerts.

  3. 03

    AI adopted with ownership, not as a side project

    Use-case intake, risk classification, guardrails, and governance so security, privacy, and business value stay one conversation.

  4. 04

    Senior direction without a full-time executive hire

    An operating model, accountability, and security leadership for the decisions in front of you — automation and evidence included.

Services

Advisory services

Four engagement types. Each one is scoped to a decision, not sold as a catalogue of tools.

01

Cloud Security Architecture

Design and improve secure, scalable AWS and hybrid-cloud environments.

AWS Professional and Specialty certifications. The work follows AWS security practice: identity foundations, traceability, layered controls, automation, data protection, and readiness for security events.

Typical outcomes

  • Architecture reviews and target-state designs
  • Identity, access, and privileged-access strategy
  • Threat modelling and secure-design assurance
  • Posture, logging, detection, and incident readiness
  • Guardrails, control standards, and architecture decision records

02

vCISO and Security Leadership

Strategic security leadership where a permanent CISO appointment is not required, or not yet feasible.

CISSP-certified security leadership. Organised with NIST CSF 2.0: Govern, Identify, Protect, Detect, Respond, and Recover — governance kept distinct from operations.

Typical outcomes

  • Security strategy, roadmap, and investment plan
  • Board and executive security reporting
  • Governance, policies, roles, and decision rights
  • Risk-register design, treatment, and assurance reporting
  • Third-party, cloud, and technology-risk governance
  • Operating-model and capability-maturity assessment

03

AI Security and Governance

Responsible AI adoption, with security, privacy, assurance, and business value treated as one piece of work.

AAISM-certified. Structured with the NIST AI RMF — Govern, Map, Measure, and Manage — and with ISO/IEC 42001 where an organisation needs an AI management system, not only a control list.

Typical outcomes

  • AI use-case intake and risk classification
  • System inventory, ownership, and lifecycle governance
  • AI-security architecture, threat modelling, and control requirements
  • Generative and agentic AI risk assessment
  • Third-party AI and model supply-chain assurance
  • Risk register, executive reporting, and a review model

04

Exposure Management and Security Automation

A clearer view of exposure across cloud and endpoint environments, and a way to act on what matters.

Prioritisation informed by asset context, ownership, and whether a control is actually in place.

Typical outcomes

  • Asset, ownership, and control-coverage assessment
  • Exposure prioritisation with business context
  • Vulnerability workflow and remediation governance
  • Tool integration and operational data normalisation
  • SOAR and API-driven triage, routing, and evidence
  • Metrics, dashboards, and service-level reporting

Approach

A practical, evidence-led approach

  1. 01

    Establish the decision context

    Business objectives, critical services, regulatory constraints, architecture boundaries, ownership, and risk tolerance.

  2. 02

    Identify material risk

    Assets, identity paths, data flows, threats, vulnerabilities, control gaps, and operational dependencies.

  3. 03

    Prioritise what matters

    Technical findings become business impact, accountable owners, remediation choices, and a delivery sequence.

  4. 04

    Design and deliver improvements

    Usable architecture, control requirements, automation patterns, governance artefacts, and implementation backlogs.

  5. 05

    Create evidence and repeatability

    Risk registers, decision records, metrics, dashboards, procedures, and routines that remain useful after the engagement.

The sequence matches how NIST CSF 2.0 is used in practice: a current state, a target state, the gaps between them, and a prioritised action plan.

About

About IDMX

IDMX is an independent cybersecurity advisory practice led by Michael Medenblik, a Chief Security Architect and Deputy CISO based in Tel Aviv.

Michael works at the intersection of cloud architecture, cybersecurity governance, identity, exposure management, security automation, and AI assurance. He combines hands-on AWS and security-operations experience with executive-level risk, governance, and transformation leadership.

LinkedIn — Michael Medenblik

Credentials

  • CISSP
  • AWS Professional and Specialty
  • AAISM — ISACA Advanced in AI Security Management

Areas of practice

  • AWS and hybrid-cloud security architecture
  • Security governance, assurance, and risk
  • Identity and access management
  • AI security and responsible adoption
  • Exposure management, CrowdStrike, SOAR, and automation

Engagement model

Engagements designed for real decisions

Scoped to the problem. Fixed prices are not published — complexity, access, and accountability change the shape of the work.

Security architecture review

Best forA new workload, a material change, a cloud migration, or a specific security concern.

Typical deliverableFindings, architecture decisions, a risk-ranked roadmap, and a target-state design.

Cloud-security improvement sprint

Best forA need to improve AWS posture and engineering controls quickly.

Typical deliverableA prioritised remediation plan, a control backlog, and implementation guidance.

AI governance foundation

Best forAI adoption without a repeatable governance model.

Typical deliverableAn inventory, a risk process, a governance charter, a risk register, and a control baseline.

Fractional CISO / security leadership

Best forA business that needs senior direction and executive governance.

Typical deliverableStrategy, board reporting, decision forums, a roadmap, and a security operating model.

Security automation design

Best forFragmented remediation, reporting, or triage.

Typical deliverableAn automation architecture, a data model, workflow designs, and a delivery backlog.

Contact

Start with the problem, not a sales process

If you are assessing a cloud-security challenge, improving a security operating model, preparing an AI-enabled service, or need senior advisory capacity, write for a confidential initial discussion.

Location
Tel Aviv-Yafo, Israel · Selected international engagements
Preferred contact method

The form prepares an email. It does not store the note on this site.