Background

This document is intended for Masterpoint clients who have purchased our IaC Audit service and are looking to either get an understanding of what is required OR start beginning the process to provide us access and schedule interviews.

What to expect

Generally, the Masterpoint IaC Audit is a week-long process where we will review your organization’s code, infrastructure, documentation, workflows, and culture to determine how we can advise and guide your organization towards IaC and Platform success.

As a result of our audit, our team will deliver a report that evaluates your organization against our best practices and provides recommendations on where to go from here. We can execute on those recommendations for you, or your organization can take those learnings internally.

Custom Audit Expectations

In the case of a custom audit, which we will define directly with your team, we’ll take more time to focus on specific areas of your infrastructure and operations. This typically means 2 to 3 weeks before our report is completed.

Audit Scope

The primary focus of our IaC Audit is your organization’s platform workflows and infrastructure-as-code implementation. We’ll assess the quality and structure of your IaC, your workflows for making infrastructure changes, and the cultural practices that shape how infrastructure is managed.

As a secondary focus, we’ll also review surrounding elements like cloud architecture, CI/CD pipelines, security posture, and other platform concerns to provide context and spot major misalignments. However, clients should not expect a comprehensive security audit or full architectural review — our one-week engagement is focused on how your organization handles infrastructure and IaC. Our goal is to deliver actionable suggestions that strengthen your foundation for managing infrastructure longterm.

Timeline

We follow a standardized one-week timeline. Please review the schedule below so we can stay aligned and make sure you get the most out of the audit

In order to start on time, we require read-only access to the following no later than the Friday before the scheduled Kickoff Monday.

Audit Week Schedule

Timing Expected Events
Previous Week 🔹 Audit client intake – Background information collection, schedule meetings, and providing access
🔹 Kickoff meeting with your team and Masterpoint – Confirm access and goals for the involved Masterpoint team members
Monday 🔹 Interview with Stakeholder #1
🔹 Masterpoint Review
Tuesday 🔹 Interview with Stakeholder #2
🔹 Masterpoint Review
Wednesday 🔹 Masterpoint Review
🔹 Masterpoint Report Writeup
Thursday 🔹 Masterpoint Review
🔹 Masterpoint Report Writeup
🔹 Masterpoint internal review and client questions
Friday 🔹 (Optional): Draft report delivery meeting
🔹 Masterpoint Report Writeup
Following week 🔹 Final report delivery meeting

Slack Expectation

Throughout the audit process, we’ll stay in close communication with your team via a shared Slack channel. This channel allows us to quickly ask questions, clarify assumptions, and share early observations without waiting for scheduled meetings.

We also encourage your team to use this channel freely. The more transparent and engaged the conversation, the more effective and tailored our recommendations will be. See more about how to work with us in Slack in our Working with Masterpoint doc.

Beginning the Process

Identifying Stakeholders