Case Study: National Media Company achieves secure cloud operations and continuous compliance with Fugue

Relying on Cloud GRC Team to Secure Cloud Operations

National Media Company, a large content producer running dozens of AWS accounts with heavy use of EC2, Lambda, ECS, VPC, S3 and AWS Media Services, needed to enforce cloud security best practices across its environment and third‑party vendor activity. Fugue was engaged to help the company’s new Cloud GRC team ensure required AWS security services (Config, GuardDuty, CloudTrail) were always enabled, detect unauthorized configuration changes, and verify that vendor‑created resources met secure baselines using Fugue’s Open Policy Agent‑based rules engine and compliance rule sets.

Fugue implemented automated checks (Fugue Best Practices and CIS AWS Foundations Benchmark rules), continuous drift detection, and notifications into the Cloud GRC workflow so any service disablement or configuration drift is immediately reported. As a result, Fugue ensures required AWS services are running on every account, surfaces drift events (for example VPC, route table and security group changes) for change management, and gives the National Media Company continuous, measurable visibility and control over cloud security posture.