Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
3 examples referencing Cloud landing zone
- SC.L2-3.13.5[a] [b]
Public web and file-drop portal in a separate cloud account with no route home
AO coverage. Addresses both Public-access System Separation objectives: identifying publicly accessible components and separating their subnetworks from internal networks. Publicly accessible…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - SC.L2-3.13.2[a] [c] [d] [f]
Reference architecture and landing-zone guardrails for an OSC that buys rather than builds
AO coverage. Claims objectives [a], [c], [d], and [f] — identifying and employing architectural designs and systems engineering principles. Objectives [b] and [e] (software development techniques)…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - AU.L2-3.3.8[a] [b] [c] [d] [e] [f]
Write-once archive in a separate account so a log admin cannot erase their own trail
AO coverage. Addresses all six Audit Protection objectives: audit information protected from unauthorized access [a], modification [b], and deletion [c], and the logging tools themselves protected…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet