ISO/IEC 27001 readiness
work
Security policies, system and architecture documentation, and the technical controls behind them across AWS and back-end microservices.
Readiness work, not audit or certification.
checks
- Unused services disabled
- Inbound traffic limited to the CDN
- SSH → AWS Session Manager
- Evidence collected automatically