#audit-logs

Identity, network, default creds, attestation, audit logs — the controls that close most of the gap Parts 1 and 2 left.