Conducting a Cyber Posture Assessment

Hello all,

I was recently hired as a cloud security admin for a cloud consulting firm. One of my first projects is to conduct a cyber posture assessment.

I've created a basic framework mapping of inventorying all devices, application, procedures, and vulnerabilities and pairing them with current threats.

Does anyone have any tips or ideas from cyber posture assessments they have completed in the past?

assessment cyber cybersecurity posture