CSPM — GCP CIS Foundations Benchmark v3.0 (subset)

Automated assessment of GCP projects against a curated subset of CIS GCP Foundations Benchmark v3.0. The full benchmark has 80+ controls; this skill implements 7 high-impact checks that cover the most common findings on real GCP projects. Each check is mapped to NIST CSF 2.0.

Honest scope: the table below lists only what src/checks.py actually implements. See the Roadmap at the bottom for controls that are documented by CIS but not yet automated here. Contributions welcome — one check per function, one finding row per control.

When to Use

• GCP project security posture assessment
• Pre-audit for SOC 2, ISO 27001, FedRAMP
• Vertex AI deployment security review
• New project baseline validation
• Service account key hygiene audit