vm-ops/70-audits/checklists/quarterly.md

Quarterly Drift Control

Identity

• Rotate high-value credentials and invalidate old material.
• Re-evaluate role scopes; remove privileges that became “default”.

Backup reality check

• Perform a full restore drill of at least one critical system.
• Verify restore validation steps still match reality.

Infra sanity

• Identify and remove orphaned resources (accounts, hosts, services).
• Confirm all critical infrastructure is reproducible from ops/.