End-to-end RHEL system hardening using OpenSCAP with DISA STIG profile. SELinux enforcement, auditd configuration, PAM policies, SSH hardening, and full compliance documentation for audit readiness.