West African Enterprise Group Gains One Operating Picture Across Its Hybrid Cloud With Ollandi

The condition

The group runs core workloads in its own data centres in two West African countries and newer services in public cloud regions. Data localization rules keep some systems on premises. Customer-facing services depend on both.

Each environment had its own tools and its own team. The directory, virtualization, storage and network teams saw their layers clearly and the dependencies between them poorly. When a change in one place caused a failure in another, the investigation started with a meeting to work out whose problem it was.

The security team faced the same gap. An identity change on premises could grant access to cloud resources, and no single tool followed the path from one to the other.

Ollandi's role

The group deployed Ollandi with the On-Premises and Network Domain Intelligence Packs alongside its cloud coverage, as a reasoning layer over the tools it already ran. Ollandi maintains a live model of directories, virtualization hosts, storage, databases, configuration and the network paths that connect the data centres to the cloud regions.

Dependencies made explicit

Ollandi maps which services depend on which hosts, links and identities in both environments. When a storage array degrades or a cross-border link loses capacity, it shows which customer-facing services are exposed and which team owns the next action.

Identity changes followed across the boundary

When a privileged group membership changed in the on-premises directory, Ollandi traced the effective permissions it granted in the cloud tenancy and raised the change for review with that path attached. The security team could see what the change made possible, not only that it happened.

Response inside the group's authority

The deployment runs under the Assisted Response control. Ollandi recommends an evidence-backed next action, such as reverting a configuration or suspending a session, and an authorized operator approves it before anything is executed. Each action is verified afterwards and recorded with the evidence that justified it.

The operating outcome

Incidents that cross the on-premises and cloud boundary now start with a shared account of what changed, what depends on it and who owns the response. Identity and configuration changes are reviewed with their consequences visible, and every approved action has a record the group can show to its regulators and auditors.

Operating control: Assisted Response.