As Wärtsilä's products, services and corporate operations increasingly run in the public cloud, we build and operate securely on various cloud platforms. Wärtsilä's Cloud Security team develops and maintains the preventive controls, visibility tooling, and expertise that business and product teams rely on across cloud environments.
Business and product teams across Wärtsilä own the cloud environments they build in and the resources they deploy. The central Cloud Security team, working with the IT organisation, builds and maintains the platforms, guardrails, and guidance that make secure configurations the default. Cloud Security partners with teams on design, review, and continuous improvement, guided by the wider principles described in the Cyber Governance and risk management page.
Preventive controls and standardised landing zones form the foundation of Wärtsilä’s public cloud operations. New environments start from a known-good baseline with identity, network segmentation, logging, and core configuration controls already in place. This lets teams inherit a secure starting point rather than building one from scratch.
We use an industry-leading Cloud-Native Application Protection Platform (CNAPP) alongside native security services from cloud providers, which give Cyber Security and operating teams a continuous view of misconfigurations, vulnerabilities, and exposure across multi-cloud workloads. This visibility feeds into the wider monitoring and detection capabilities operated by Wärtsilä Security Operations Centre.
Automation and AI-assisted workflows play a growing role in Cloud Security. AI agents increasingly support routine investigation and triage, including investigating security alerts and contributing to internal security testing programmes. This allows specialists to focus on the issues that require human judgement.
Cloud Security publishes practical guidance and best practices, conducts design-stage security reviews for cloud projects, and provides hands-on support to Wärtsilä teams.
Wärtsilä treats the cloud as a first-class part of its overall security posture and continues to invest in industry-leading cloud security practices.
What’s the value for you?
