Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
3 examples referencing BitLocker
- MP.L2-3.8.6[a]
Hardware-encrypted drives only; the courier never carries a plaintext disk
AO coverage. Addresses the Portable Storage Encryption objective: the confidentiality of CUI on digital media during transport is protected by cryptographic mechanisms. We rely on cryptography rather…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet Encryption at rest everywhere CUI lands, with a written list of where that is
AO coverage. Addresses the single Data At Rest objective for every location where CUI is authorized to reside. Locations enumerated. The control is only as good as the list, so the list is explicit:…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet- SC.L2-3.13.10[a] [b]
Keys born in HSM-backed vaults; escrow, rotation, and revocation are all ticketed events
AO coverage. Addresses both Key Management objectives: keys are established and keys are managed wherever cryptography is employed. Key inventory. One register lists every key and certificate class…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet