Assessment - Q1 2025 ORR

Status:

Passed

Score: 81.34

Assessment Information

Category:	Architecture & Engineering Services
Last Run:	2025-04-16 16:29
Notes:	Simulated assessment ran on 2025-07-31 19:20:59.978241

Checkpoint Details

ID:	ARCH-001
Description:	Evaluates the completeness and quality of architecture documentation.

Recommendation: Continue regular maintenance and monitoring.

Status:

Failed

Score: 19.50

Assessment Information

Category:	Global Hosting
Last Run:	2025-04-16 16:29
Notes:	Simulated assessment ran on 2025-07-31 19:21:00.387530

Checkpoint Details

ID:	HOST-001
Description:	Verifies that local load balancers conform to standards.

Recommendation: Continue regular maintenance and monitoring.

Status:

Warning

Score: 53.88

Assessment Information

Category:	Infrastructure Portfolio Management
Last Run:	2025-04-16 16:29
Notes:	Simulated assessment ran on 2025-07-31 19:21:00.794460

Checkpoint Details

ID:	MONITOR-001
Description:	Evaluates the effectiveness of automated monitoring systems based on coverage, alert quality, and response times.

Recommendation: Continue regular maintenance and monitoring.

Status:

Warning

Score: 0.00

Assessment Information

Category:	Infrastructure Portfolio Management
Last Run:	2025-04-16 16:29
Notes:	Automated assessment ran on 2025-07-31 19:21:02.334427

Checkpoint Details

ID:	EC2-001
Description:	Checks the operational health of EC2 instances and their monitoring configuration.

Recommendation: No EC2 instances found in this AWS account or region.

Detailed Results

{
  "evaluation_time": "2025-07-31T19:21:01.200513+00:00",
  "instances": [],
  "instances_without_monitoring": 0,
  "instances_without_tags": 0,
  "running_instances": 0,
  "stopped_instances": 0,
  "total_instances": 0,
  "unpatched_instances": 0
}

Status:

Failed

Score: 0.00

Assessment Information

Category:	Infrastructure Portfolio Management
Last Run:	2025-04-16 16:29
Notes:	Automated assessment ran on 2025-07-31 19:21:32.499382

Checkpoint Details

ID:	DR-001
Description:	Evaluates disaster recovery readiness based on plan compliance, testing frequency, and recovery objectives.

Recommendation: Update DR plan to ensure it meets compliance requirements. Establish a regular testing schedule of at least annually (every 3-12 months). Conduct a DR review as soon as possible. Improve RPO to be under 24 hours. Improve RTO to be under 4 hours. Enhance system availability and resiliency measures. Improve site disaster recovery capabilities. Review and enhance hosting vendor alternatives.

Detailed Results

{
  "criteria_details": {
    "dr_plan_compliance_status": {
      "message": "Missing required data: dr_plan_compliance_status",
      "status": "failed"
    },
    "dr_testing_frequency": {
      "message": "Missing required data: dr_testing_frequency",
      "status": "failed"
    },
    "hosting_vendor_score": {
      "message": "Missing required data: hosting_vendor_score",
      "status": "failed"
    },
    "last_dr_review_date": {
      "message": "Missing required data: last_dr_review_date",
      "status": "failed"
    },
    "overall_dr_rpo": {
      "message": "Missing required data: overall_dr_rpo",
      "status": "failed"
    },
    "overall_dr_rto": {
      "message": "Missing required data: overall_dr_rto",
      "status": "failed"
    },
    "site_dr_score": {
      "message": "Missing required data: site_dr_score",
      "status": "failed"
    },
    "system_availability_score": {
      "message": "Missing required data: system_availability_score",
      "status": "failed"
    }
  },
  "scores": {
    "dr_plan_compliance_status": 0,
    "dr_testing_frequency": 0,
    "hosting_vendor_score": 0,
    "last_dr_review_date": 0,
    "overall_dr_rpo": 0,
    "overall_dr_rto": 0,
    "site_dr_score": 0,
    "system_availability_score": 0
  }
}

Status:

Failed

Score: 0.47

Assessment Information

Category:	Global Information Security
Last Run:	2025-04-16 16:29
Notes:	Automated assessment ran on 2025-07-31 19:21:11.133145

Checkpoint Details

ID:	SEC-001
Description:	Verifies enrollment in the Operational Risk Compliance Assessment program.

Recommendation: Strengthen account password policy to require longer passwords, symbols, numbers, and expiration. Enable MFA for 1 users with console access. Rotate 2 access keys that are older than 90 days. Review and reduce permissions for 2 users with admin access. Review and reduce permissions for 1 roles with admin access.

Detailed Results

{
  "evaluation_time": "2025-07-31T19:21:02.742296+00:00",
  "password_policy": null,
  "password_policy_strength": 0,
  "roles": [
    {
      "created": "2023-06-16T04:24:48+00:00",
      "has_admin_permissions": false,
      "name": "AmazonSageMaker-ExecutionRole-20230616T095414",
      "policies": [
        "AmazonSageMaker-ExecutionPolicy-20230616T095414",
        "AmazonSageMakerFullAccess"
      ]
    },
    {
      "created": "2023-06-03T01:03:04+00:00",
      "has_admin_permissions": false,
      "name": "aws-ec2-spot-fleet-tagging-role",
      "policies": [
        "AmazonEC2SpotFleetTaggingRole"
      ]
    },
    {
      "created": "2023-06-21T11:53:40+00:00",
      "has_admin_permissions": false,
      "name": "aws-elasticbeanstalk-service-role",
      "policies": [
        "AWSElasticBeanstalkEnhancedHealth",
        "AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:09:50+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAmazonEKS",
      "policies": [
        "AmazonEKSServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:18:49+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAmazonEKSNodegroup",
      "policies": [
        "AWSServiceRoleForAmazonEKSNodegroup"
      ]
    },
    {
      "created": "2023-06-21T11:29:20+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForApplicationAutoScaling_DynamoDBTable",
      "policies": [
        "AWSApplicationAutoscalingDynamoDBTablePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:19:08+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAutoScaling",
      "policies": [
        "AutoScalingServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-11T09:55:38+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForEC2Spot",
      "policies": [
        "AWSEC2SpotServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T07:05:52+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForElasticLoadBalancing",
      "policies": [
        "AWSElasticLoadBalancingServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T04:51:39+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForOrganizations",
      "policies": [
        "AWSOrganizationsServiceTrustPolicy"
      ]
    },
    {
      "created": "2023-06-21T10:03:53+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForRDS",
      "policies": [
        "AmazonRDSServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-12T10:54:12+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForResourceExplorer",
      "policies": [
        "AWSResourceExplorerServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T04:51:41+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForSSO",
      "policies": [
        "AWSSSOServiceRolePolicy"
      ]
    },
    {
      "created": "2018-08-17T20:15:28+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForSupport",
      "policies": [
        "AWSSupportServiceRolePolicy"
      ]
    },
    {
      "created": "2018-08-19T23:05:11+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForTrustedAdvisor",
      "policies": [
        "AWSTrustedAdvisorServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-13T06:51:14+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForVPCTransitGateway",
      "policies": [
        "AWSVPCTransitGatewayServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-14T14:35:20+00:00",
      "has_admin_permissions": false,
      "name": "ec2_s3_airflow_role",
      "policies": [
        "AmazonEC2FullAccess",
        "AmazonS3FullAccess"
      ]
    },
    {
      "created": "2023-06-14T06:45:43+00:00",
      "has_admin_permissions": true,
      "name": "glue-admin",
      "policies": [
        "AdministratorAccess"
      ]
    },
    {
      "created": "2023-06-21T10:03:49+00:00",
      "has_admin_permissions": false,
      "name": "rds-monitoring-role",
      "policies": [
        "AmazonRDSEnhancedMonitoringRole"
      ]
    },
    {
      "created": "2023-06-21T12:54:45+00:00",
      "has_admin_permissions": false,
      "name": "StorageGatewayBucketAccessRole16873520845900.017127998258565036",
      "policies": [
        "AllowStorageGatewayAssumeBucketAccessRole16873520845900.4670055199941725"
      ]
    }
  ],
  "roles_with_excessive_permissions": 1,
  "total_roles": 20,
  "total_users": 2,
  "users": [
    {
      "access_keys_count": 1,
      "created": "2023-05-05T05:03:45+00:00",
      "has_admin_permissions": true,
      "has_console_access": false,
      "mfa_enabled": false,
      "name": "potluriteja",
      "old_access_keys": true,
      "policies": [
        "AdministratorAccess"
      ]
    },
    {
      "access_keys_count": 1,
      "created": "2025-04-14T14:59:37+00:00",
      "has_admin_permissions": true,
      "has_console_access": true,
      "mfa_enabled": false,
      "name": "potluriteja1",
      "old_access_keys": true,
      "policies": [
        "AdministratorAccess"
      ]
    }
  ],
  "users_with_console_access": 1,
  "users_with_excessive_permissions": 2,
  "users_with_old_access_keys": 2,
  "users_without_mfa": 1
}

Status:

Passed

Score: 5.00

Assessment Information

Category:	Global Information Security
Last Run:	2025-04-16 16:29
Notes:	Automated assessment ran on 2025-07-31 19:21:32.092068

Checkpoint Details

ID:	SSL-001
Description:	Verifies that SSL certificates are properly registered and maintained.

Recommendation: All SSL certificates are valid and not near expiry.

Detailed Results

{
  "certificates": [
    {
      "days_remaining": 168,
      "domain": "example.com",
      "error": null,
      "issuer": "DigiCert Inc",
      "subject": "*.example.com",
      "valid": true,
      "valid_from": "2025-01-15T00:00:00",
      "valid_until": "2026-01-15T23:59:59"
    },
    {
      "days_remaining": 81,
      "domain": "replit.com",
      "error": null,
      "issuer": "Google Trust Services",
      "subject": "replit.com",
      "valid": true,
      "valid_from": "2025-07-23T05:02:14",
      "valid_until": "2025-10-21T06:01:53"
    }
  ],
  "evaluation_time": "2025-07-31T19:21:11.544139+00:00",
  "expired_certificates": 0,
  "invalid_certificates": 0,
  "near_expiry_certificates": 0,
  "total_certificates": 2
}

Q1 2025 ORR

Overall Score: 20.79 / 100

Checkpoint Results

Architecture & Engineering Services

Architecture Documents

Global Hosting

Local Load Balancer Conformance

Infrastructure Portfolio Management

Automated Monitoring

EC2 Instances Monitoring

DR Readiness

Global Information Security

Enrolled in ORCA

SSL Certificates Registered