We are a Fintech company planning to move our servers to the cloud using an IaaS model. We are currently in discussions with several major cloud service providers (CSPs) for hosting within our region.

Given the sensitivity and regulatory requirements of the Fintech sector, I want to ensure we cover all necessary security aspects in our discussions with CSPs. What security solutions should we be asking for? Specifically, I'm considering solutions such as:

• Antimalware EDR
• IAM
• WAF
• DDoS
• Data encryption
• Vulnerability management
• Network security
• Compliance and auditing tools

Are there any other critical security solutions or best practices we should consider.

Thank you for your insights