Posture, spend & inventory
Executive posture summary
As of 2026-08-15
Prepared by Achieve
Industry avg 81 · Industrial & Manufacturing · +7 vs sector
Strong security foundation — a couple of critical cloud findings are the main thing between you and an A.
Why this grade: 2 critical and 2 high findings are the main drag — clearing the criticals lifts the grade fastest.
Compliance readiness
Fix first — highest-exposure findings
AWS · i-0nwprocessingec201 · Active threat
AWS · i-0nwtradeapi3
AWS · nw-processing-ec2-01 · Unencrypted · Open 77d
AWS · processing-processor · Open 73d
Strong security foundation — a couple of critical cloud findings are the main thing between you and an A.
| Domain | Grade | Score | Status | Trend | Summary |
|---|---|---|---|---|---|
| Security | B | 83 | warn | up | 2 critical cloud findings (a public S3 bucket, an exposed key) are the main drag; the rest is low/medium. |
| Resilience | B+ | 86 | good | up | Multi-AZ EC2 behind an ALB; backup coverage at 74% with two failed jobs to chase down. |
| Identity | B | 84 | good | up | MFA at 88%; 24 privileged and 31 stale accounts flagged for review. |
| Compliance | B- | 80 | warn | up | SOC 2 Type II in progress; CIS AWS Benchmark at 84%. |
| Endpoints | B | 83 | good | flat | Intune + CrowdStrike across the fleet; one stale Windows host and a couple of EDR gaps. |
| Cloud cost | B+ | 88 | good | down | AWS spend trending under last month; a few idle resources to trim. |
Work mirrored from the customer's Jira board, plus open finding load.
| Key | Type | Summary | Priority | Status | Assignee | Due |
|---|---|---|---|---|---|---|
| REM-88 | Bug | Security group `sg-web` allows 0.0.0.0/0 on 22 | Critical | To Do | Unassigned | ⚠ Jul 29, 2026 |
| REM-84 | Task | 3 macOS endpoints behind on OS (Jamf) — push update | Medium | In Progress | Dana White | ⚠ Aug 1, 2026 |
| REM-79 | Task | Rotate long-lived AWS access key for `ci-deploy` | High | Done | Dana White | — |
All declared capabilities connected.
| Framework | Status | Readiness | Controls | Next milestone |
|---|---|---|---|---|
| SOC 2 Type II | certified | 100% | 91/91 | Annual renewal Mar 2027 |
| PCI DSS | in-progress | 64% | 162/254 | Target QSA assessment Q1 2027 |
| ISO 27001 | gap | 41% | 47/114 | Risk treatment plan in review |
| NIST CSF | in-progress | 72% | 79/110 | — |
No managed vendors.