open-cmmc-stack/evidence/02_system_hardening/evidence.md

🛡️ Evidence – System Hardening

Purpose

Evidence of host OS and container baseline security including hardened configurations, SSH controls, and auditd/aide logs.

Included Artifacts

• Ansible playbook logs
• Auditd rules and logs
• SSH daemon configs
• AIDE database init and scan result

Review Checklist

• Ansible logs show successful hardening
• Login banners and password policies verified
• Audit and integrity scans scheduled