Enterprise cloud security operating model documentation — a comprehensive, audit-ready security framework for Azure hybrid environments. This is a docs-only repo (Markdown, Mermaid diagrams, HTML). No application code.
| Directory | Content |
|---|---|
docs/01–19 |
Core service model docs: definition, catalog, architecture principles, governance, metrics, operating model, incident response, vulnerability management, access management, data protection, DevSecOps |
docs/20-runbooks/ |
Operational runbooks (incident triage, vuln response, policy drift, break-glass access, Sentinel tuning) |
docs/21-templates/ |
Reusable templates (change request, exception, incident report, postmortem, KPI dashboard) |
docs/22-diagrams/ |
Mermaid source files for all architecture and process diagrams |
agile/ |
Sprint ceremonies, backlog, OKRs, KPI cadence |
impl/azure/sentinel/ |
Sentinel playbook examples |
- All diagrams are Mermaid (
.mmdfiles indocs/22-diagrams/) — they render natively in GitHub - Template files use
template-prefix indocs/21-templates/ - Runbook files use
rbk-NNN-prefix - No code, no builds, no test suites — pure documentation
.editorconfigenforces consistent whitespace
- Keep docs enterprise-grade in tone — no toy/demo language
- Update diagrams alongside prose when process flows change
- Run markdownlint (
npx markdownlint-cli docs/) before committing - All PRs should use
.github/pull_request_template.md
Use /gsd:quick for doc edits. For large restructures, use /gsd:plan-phase.