FIELD NOTE · E6 · Com2us Platform · Feb 2023 – Feb 2026

Making sure the same finding never comes back

Sort by impact, agree on alternatives, and block it with code defaults

60% → 85%+

In one line

Sorted security findings by service impact, agreed on compensating controls, and turned repeated findings into code defaults, raising the audit remediation rate from 60% to over 85%.

Highlights

• Sorted by service impact instead of blocking everything
• Agreed on compensating controls when blocking was not possible
• Repeated findings became Terraform defaults and deployment gates

Tech

CSPM · Terraform · GitLab CI/CD · Jenkins · Collaboration