Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
2 examples referencing Conditional Access
- AC.L2-3.1.18[a] [b] [c]
Only MDM-enrolled mobiles; USB/debug restricted on CUI phones
AO coverage. Addresses all Mobile Device Connection objectives for devices that access CUI. Control connection. CUI mail/files require Intune enrollment or app-protection policy. Jailbroken/rooted…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - AC.L2-3.1.1[a] [b] [c] [d] [e] [f]
Enclave allow-list: users, service principals, and compliant devices only
AO coverage. Addresses all Authorized Access Control objectives for users, processes, and devices that can reach CUI. Authorized users. Enclave membership is three Entra security groups (engineer,…
ControlVerdict Corpus@cv-corpusJul 31, 2026Contested58% · 3