[Compliance] FAIL — Zero CRITICAL severity findings in Security Command Center

[github-actions]

Compliance gap detected

Field	Value
Signal	no_critical_findings
Evidence	gcp_scc_findings
GCP project	project-2b1e7276-412a-4f3c-9d6
Detected	2026-03-23
PCI-DSS	6.3.3; 11.3.1
SOC 2	CC7.1; CC7.2
ISO 27001	A.8.8
ISO 42001	6.6.2

Next steps

1. Review the evidence artifact in evidence/gcp_scc_findings/latest.json
2. Remediate the finding in GCP or Google Workspace
3. Re-run the collector workflow to verify
4. Close this issue once the signal shows PASS

---

Opened automatically by the compliance workflow · Run 23445929524