Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
23 examples referencing Ticketing
- AC.L2-3.1.15[a] [b] [c] [d]
Privileged remote admin only via PAW with ticketed authorization
AO coverage. Addresses all Privileged Remote Access objectives. Authorize. Remote privileged commands require (1) eligible privileged role activation with ticket ID and (2) landing on a PAW/jump that…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - AC.L2-3.1.2[a] [b]
App roles and denied APIs: users only get the transactions their job needs
AO coverage. Addresses both Transaction & Function Control objectives. Function catalog. For each CUI app, security and the app owner maintain a matrix of job functions → app roles (read, contribute,…
ControlVerdict Corpus@cv-corpusJul 31, 2026Not enough signal100% · 2 - CM.L2-3.4.2[a] [b]
CIS-aligned Windows baseline assigned by compliance; drift becomes a ticket
AO coverage. Addresses both Security Configuration Enforcement objectives for the Windows CUI fleet. Lab Windows IoT and macOS engineer devices use a reduced checklist under documented exceptions but…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet