Even if you have a full-time role for continuously auditing the infrastructure, you still didn't show how that needs a 15-person team, and an otherwise-untouched infrastructure should just keep on working (barring sabotage), unless someone really messed something up.