Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
2 examples referencing 802.1X
- AC.L2-3.1.17[a] [b]
WPA2/3-Enterprise with certs; no PSK on CUI-capable SSIDs
AO coverage. Addresses both Wireless Access Protection objectives. Authentication + encryption. Corp SSID uses WPA2/3-Enterprise with RADIUS. PSK SSIDs are forbidden for any VLAN that can reach CUI.…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - AC.L2-3.1.16[a] [b]
Corporate WLAN allow-list; guest SSID has no enclave route
AO coverage. Addresses both Wireless Access Authorization objectives. Authorize prior to connect. Corporate SSID requires device certificate or 802.1X user/machine auth via ISE. Unknown devices land…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet