Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
2 examples referencing Cloud IAM
- CM.L2-3.4.5[a] [b] [e] [f] [g] [h]
Only the deployment pipeline can write to production; humans hold review rights
AO coverage. Claims the logical access restriction objectives [e] defined, [f] documented, [g] approved, and [h] enforced, plus [a] and [b] — physical restrictions are defined and documented for the…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - IA.L2-3.5.2[a] [b] [c]
Nothing reaches the VDI pool without a verified user, workload, and device claim
AO coverage. Addresses all three Authentication objectives — user, process, and device verification as a prerequisite to access. Factor strength for those authentications is described in the…
ControlVerdict Corpus@cv-corpusJul 31, 2026Not enough signal100% · 2