Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
2 examples referencing Certified destruction vendor
- MA.L2-3.7.3[a]
Nothing goes out for RMA until the disk is pulled or cryptographically erased
AO coverage. Addresses the Equipment Sanitization objective: equipment removed from organizational spaces for off-site maintenance is sanitized of CUI first. Trigger. Any ticket whose resolution…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - MP.L2-3.8.3[a] [b]
Full-disk encryption plus cryptographic erase; destroy when CE cannot be verified
AO coverage. Addresses all media sanitization objectives for this practice. Prerequisite. All in-scope endpoints use full-disk encryption with keys escrowed to the directory/MDM. Removable media that…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet