mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 16:40:24 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
44 lines
1.4 KiB
Markdown
44 lines
1.4 KiB
Markdown
# Cloud Security Posture Management - Assessment Template
|
|
|
|
## Scope Definition
|
|
- **Cloud Providers**: [ ] AWS [ ] Azure [ ] GCP
|
|
- **Accounts/Subscriptions**: [List accounts in scope]
|
|
- **Compliance Framework**: [ ] CIS Benchmark [ ] PCI DSS [ ] NIST 800-53 [ ] SOC 2
|
|
- **Assessment Frequency**: [ ] Daily [ ] Weekly [ ] Monthly
|
|
|
|
## Critical Checks by Cloud Provider
|
|
|
|
### AWS Priority Checks
|
|
- [ ] S3 buckets not publicly accessible
|
|
- [ ] Root account MFA enabled
|
|
- [ ] CloudTrail enabled in all regions
|
|
- [ ] IAM access keys rotated within 90 days
|
|
- [ ] Security groups no unrestricted inbound (0.0.0.0/0)
|
|
- [ ] RDS instances not publicly accessible
|
|
- [ ] EBS volumes encrypted
|
|
- [ ] VPC flow logs enabled
|
|
|
|
### Azure Priority Checks
|
|
- [ ] Storage accounts not publicly accessible
|
|
- [ ] MFA enabled for all privileged accounts
|
|
- [ ] Activity log alerts configured
|
|
- [ ] NSG rules reviewed for unrestricted access
|
|
- [ ] SQL databases encrypted at rest
|
|
- [ ] Key Vault access policies reviewed
|
|
- [ ] Defender for Cloud enabled
|
|
|
|
### GCP Priority Checks
|
|
- [ ] Cloud Storage buckets not publicly accessible
|
|
- [ ] 2FA enforced for all users
|
|
- [ ] Audit logging enabled
|
|
- [ ] Firewall rules reviewed
|
|
- [ ] Cloud SQL instances not publicly accessible
|
|
- [ ] VPC Service Controls configured
|
|
|
|
## Report Deliverables
|
|
- [ ] Posture score by cloud account
|
|
- [ ] Failed checks by severity
|
|
- [ ] Compliance gap analysis
|
|
- [ ] Remediation priority list
|
|
- [ ] Month-over-month trend analysis
|