ops-security-audit

Infrastructure security audits automate vulnerability detection and compliance validation across your infrastructure. This Skill implements phased workflows—scope definition, automated scanning, manual review, compliance mapping, and remediation planning—to produce audit plans, findings, and closure reports for quarterly reviews and compliance preparation.

A structured security audit workflow combines automated scanning with manual IAM and network security reviews, then maps findings to compliance requirements and generates remediation plans. This approach surfaces vulnerabilities, validates compliance posture, and documents closure across all audit phases.

Yes. Infrastructure security audits apply to security incident post-mortems, new service security assessments, and quarterly compliance reviews. The phased workflow handles scope definition and automated scanning for any security posture evaluation context.

Compliance audit preparation uses automated scanning to identify vulnerabilities, manual review to assess IAM and network controls, then maps findings to compliance requirements. The Skill produces structured audit plans and closure reports ready for compliance teams.

Automated scanning detects infrastructure vulnerabilities at scale; manual review validates IAM permissions and network security controls that require contextual assessment. Together they provide comprehensive coverage—automation finds scope, manual review confirms controls and validates compliance alignment.

Yes. The audit workflow includes remediation planning after findings are mapped to compliance requirements. This ensures vulnerabilities are prioritized, assigned, and verified for closure through structured tracking from detection to resolution.