Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
1 example referencing Device certificates
- IA.L2-3.5.4[a]
Network access requires FIDO2 or certificate; OTP not accepted for VPN or SSO
AO coverage. Addresses all replay-resistant authentication objectives for this practice. Policy. Authentication strength for all CUI applications and the VPN requires a phishing-/replay-resistant…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet