Is your business moving into the Cloud? Is it thinking of moving into the Cloud? Or is it already in the Cloud, but perhaps hasn’t yet matured the security of what it has in the Cloud? The presenters work for a multi-brand organisation where their applications and over 9 petabytes of personal data are in the Cloud. However, up until September 2018, no-one owned or managed the security of AWS across the business. This was a problem and risk that needed to be rectified! When one of the presenters joined the business in May 2018, within a number of months he had seen a major gap and decided to take on this responsibility and build a team to progress the security of the org. This presentation is a rundown of that journey so far, what was discovered, our goals and learnings (injecting our normal humour into our talk!) and providing the audience with tangible information to take away to help on their cloud journey. Regardless of the role or the skill set of the audience member, they will leave with an understanding of what it is like at the coal-face of a major internet business running their applications and storing their data in the Cloud.