Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
2 examples referencing AWS KMS
- MP.L2-3.8.9[a]
Backups encrypted with our own keys, with one immutable copy the domain cannot delete
AO coverage. Addresses the Protect Backups objective: the confidentiality of backup CUI is protected at storage locations. Encryption everywhere it rests. Backup jobs encrypt at the source before…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - SC.L2-3.13.10[a] [b]
Keys born in HSM-backed vaults; escrow, rotation, and revocation are all ticketed events
AO coverage. Addresses both Key Management objectives: keys are established and keys are managed wherever cryptography is employed. Key inventory. One register lists every key and certificate class…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet