Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
2 examples referencing CIS Benchmark
- CM.L2-3.4.6[a] [b]
Role-shaped images: each server role ships only the packages that role needs
AO coverage. Addresses both Least Functionality objectives: essential capabilities are defined per role, and systems are configured to provide only those. Defining essential capabilities [a]. Each…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - CM.L2-3.4.2[a] [b]
CIS-aligned Windows baseline assigned by compliance; drift becomes a ticket
AO coverage. Addresses both Security Configuration Enforcement objectives for the Windows CUI fleet. Lab Windows IoT and macOS engineer devices use a reduced checklist under documented exceptions but…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet