CSO

Finds leaked keys, walks credential rotations, tightens access to least privilege, and audits MFA and related controls.