An insurer needs heavy simulation computing on demand, its data centre is full, and the models and data are core business secrets that never need to talk to the internet. How is this solved with perimeter security?

Question

Accepted Answer

Rent the compute as cloud services but enclose all of it in a perimeter built from virtual cloud devices (firewalls, switches, routers, a private network range), connect that perimeter to the company network through a VPN, and train the IT staff who run it on the cloud components.
The case: insurance company V runs risk-forecasting and simulation jobs that are expensive but only needed now and then. There is no room for another server farm, and an extension is too costly. Cloud rental fits, because unused resources can be shut down and only actual use is billed.
The problem is the protection need: the calculations (data and algorithms) are central to the business model. Since no interaction with the internet or any zone outside V is needed, the answer is to make the cloud part an extension of the internal network:

all cloud resources inside one perimeter, with no public exposure;
the perimeter components rented as virtual devices and configured to match;
a virtual VPN router, also a cloud service, linking the cloud perimeter to the company LAN, so model developers start jobs as if the servers were in-house;
training for the administrators, since cloud network components behave and are named differently.