{
  "@context": "https://schema.org",
  "@type": "Dataset",
  "dateModified": "2026-06-02",
  "name": "Security Posture Snapshot",
  "encryption": {
    "atRest": "AES-256-GCM (AWS KMS CMK)",
    "inTransit": "TLS 1.3 only, HSTS preload, MTA-STS",
    "keyManagement": "AWS KMS + HSM-backed root, 90-day rotation",
    "pqcReady": "X25519MLKEM768 hybrid for /agent-pqc/ endpoints"
  },
  "identity": {
    "ssoMethods": [
      "SAML 2.0",
      "OIDC"
    ],
    "mfaEnforced": true,
    "fido2Required": "admin + finance + on-call"
  },
  "network": {
    "wafCoverage": "global edge",
    "ddosProtection": "AWS Shield Advanced",
    "vpcIsolation": "per-tenant for enterprise plans"
  },
  "bcDr": {
    "rpo": "15min",
    "rto": "4h",
    "testCadence": "quarterly",
    "multiAz": true,
    "multiRegionStandby": "ap-southeast-1 + ap-southeast-7"
  },
  "vulnerability": {
    "scanCadence": "weekly + on-merge",
    "penTestCadence": "annual + on-major-release",
    "mttrCritical": "7d",
    "mttrHigh": "30d"
  },
  "observability": {
    "siem": "AWS Security Lake + OpenSearch",
    "retentionDays": 400,
    "tamperEvident": true
  }
}