Posture, spend & inventory
Executive posture summary
As of 2026-08-16
Prepared by Achieve
Industry avg 85 · Managed services · +6 vs sector
Strong by design — we deployed this dashboard the way it grades. A short hardening backlog (tighten admin scope, add a CMK) is all that stands between us and an A.
Why this grade: No critical or high findings open — posture is solid.
Compliance readiness
Fix first — highest-exposure findings
AWS · achieve-dashboard-deploy · Privileged access · Open 50d
AWS · Achieve-Admins · Privileged access · Open 50d
AWS · aws-controltower-logs · Unencrypted · Open 50d
Strong by design — we deployed this dashboard the way it grades. A short hardening backlog (tighten admin scope, add a CMK) is all that stands between us and an A.
| Domain | Grade | Score | Status | Trend | Summary |
|---|---|---|---|---|---|
| Security | A- | 90 | good | up | 3 low/medium items: deploy-role scope, audit access, KMS. |
| Resilience | A | 94 | good | flat | Multi-AZ Fargate behind an ALB; zero-downtime rolling deploys. |
| Identity | A | 95 | good | up | Entra SSO, no root use, MFA enforced; deploys via OIDC. |
| Compliance | B | 82 | good | up | SOC 2 Type II in progress; Control Tower guardrails active. |
| Endpoints | A- | 90 | good | flat | Intune + Defender across a small, fully-managed fleet. |
| Cloud cost | A | 96 | good | flat | Serverless; ~$40/mo, no idle servers or NAT gateways. |
Work mirrored from the customer's Jira board, plus open finding load.
| Key | Type | Summary | Priority | Status | Assignee | Due |
|---|---|---|---|---|---|---|
| OPS-51 | Bug | GuardDuty finding: crypto-mining pattern on `sandbox-3` | Critical | In Progress | Jordan Foy | ⚠ Jul 28, 2026 |
| OPS-47 | Task | Config drift: S3 default encryption disabled on 2 buckets | High | To Do | Unassigned | ⚠ Aug 3, 2026 |
All declared capabilities connected.
| Framework | Status | Readiness | Controls | Next milestone |
|---|---|---|---|---|
| SOC 2 Type II | in-progress | 68% | 62/91 | Observation window Q4 2026 |
| CIS AWS Benchmark | in-progress | 88% | 49/56 | Clear the hardening backlog |
No managed vendors.