Built a simple security audit process for small businesses. Would appreciate feedback from security professionals

Hi all, I’ve been working in IT support and cyber security in a mixed infrastructure and SOC-facing role for a while now, mainly focused on endpoint security, identity management and incident triage. Recently I’ve been putting together a lightweight security audit approach aimed at small businesse