Cloud FW or CSPM, first?

Hi Cybersec,

Currently our assets is in the transition to fully moving to the cloud. Almost 60% assets and data alresdy in the cloud.
For Sec Team, our budget is not quite big for this year so we need to choose between Cloud FW first or CSPM solution.

Already had a discussion with several departement, infra and devops suggest to choose FW first since the native cloud dont have threat peevention features. But in the other side, GRC and audit …

assets big budget cloud cspm cybersec cybersecurity data moving sec solution team transition