Alvaro Del Valle 7e50d8083b Update proposal levers with Prowler benchmark findings
Expand the levers table from 5 to 8 workstreams, grounding each driver in
verified counts from the Prowler run:

- Add backup & resilience (0 of 9 EBS volumes have snapshots or a backup plan)
- Add secrets & key management (19 secrets without rotation or resource policy,
  2 KMS keys without auto-rotation, unencrypted log groups)
- Add compliance acceleration (363 failures; SOC 2 at 81% against existing
  Secureframe program)
- Note Config alongside GuardDuty and Security Hub in the delegated-admin gap
- Add the two criticals and hardware-MFA gaps to identity hardening
- Add internet-facing instances with instance profiles and IMDSv2 to exposure
- Order by priority and add a framing note
2026-08-19 15:04:26 -04:00
S
Description
Audit reports
467 KiB
Languages
HTML 62.8%
Python 37.2%