[Compliance] FAIL — Security Command Center is enabled for the project

[github-actions]

Compliance gap detected

Field	Value
Signal	scc_enabled
Evidence	gcp_scc_findings
GCP project	project-2b1e7276-412a-4f3c-9d6
Detected	2026-03-23
PCI-DSS	11.3.1; 11.3.2
SOC 2	CC7.1; CC7.2
ISO 27001	A.8.8
ISO 42001	6.6.2

Next steps

1. Review the evidence artifact in evidence/gcp_scc_findings/latest.json
2. Remediate the finding in GCP or Google Workspace
3. Re-run the collector workflow to verify
4. Close this issue once the signal shows PASS

---

Opened automatically by the compliance workflow · Run 23445929524