Step-by-step IAM audit methodology covering user inventory, policy review, MFA verification, privileged account monitoring, SOD analysis, and reporting. Use this skill for procedural IAM audit guidance.
Step-by-step lead IT auditor methodology covering engagement planning through final reporting and closeout. Use this skill as a procedural guide at the start of an audit engagement.
Analyse IAM policies for excessive permissions, wildcards, admin-equivalent actions, missing conditions, and inline policies. Use this skill for access review and least-privilege analysis.
Review privileged account activity logs for baseline exceedances, off-hours access, sensitive actions, and new unknown users. Use this skill for admin activity review and privileged access monitoring.
Detect segregation of duties conflicts in user role assignments. Use this skill for role conflict analysis, four-eyes control review, and SOD violation detection.
Compare expected audit evidence artefacts from an audit program JSON against provided files and report gaps with coverage percentage. Use this skill for evidence coverage review and missing artefact analysis.
Generate a scoped IT audit program with controls mapped to roles and compliance frameworks. Use this skill for audit planning, control checklist generation, and audit_program.json creation.
Convert a structured findings JSON file into a polished executive summary with risk breakdown, key findings, and recommendations. Use this skill for leadership-facing audit reporting.