The aim of this paper is to show how security directives, concepts and mechanisms can be applied on increasingly present multi-cloud system. The emergence of Covid-19 pandemic changed the way of working for many organizations when a large number of employees replaced the organizations' offices with their own homes. That has led to an increasing need for remote access to the organization's resources, and increasing migrations of apllications and services to cloud systems. Such an approach has encouraged organizations to think more and more about security risks, about establishing their own security strategies, how to achieve identification, authentication and monitoring of users and devices, and what additional protection mechanisms they need to secure their infrastructure and information. Taking into account the needs imposed by the accelerated digital transformation, this paper presents the framework of the NIS directive with available tools for establishing a security strategy and managing its life cycle. In addition to the fact that it is important for the organization to have an established security strategy, it is also important that the implemented solution is in accordance with the best security practices, which are in accordance with the most well-known standards in the field of cyber security. Moreover, the available technical solutions described in this paper, software-defined networks and protection mechanisms at the application level, also rely on those standards.