Incident
Assessment, copy, containment, evidence kept. Restoration follows your approval.
Security
Hors-Cloud handles the incident, hardens the service, and puts secrets where they belong: a vault, an identity provider, sometimes a hardware module.
Assessment, copy, containment, evidence kept. Restoration follows your approval.
Accounts, exposed surfaces, updates, isolation of services.
OpenID Connect, roles, administration access kept apart from public access.
Signed images and artefacts, so you know what is allowed to run.
HSM and PKCS#11 for keys that must not remain a file: certificates, signatures, failover between nodes.
A reading of an architecture or a deployment before it reaches production.
A report states what is established and what is still a lead. Access details are not copied into a document that circulates.