Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
3 examples referencing Endpoint encryption
- AC.L2-3.1.21[a] [b] [c]
No org USB on home PCs; portable media only on managed endpoints
AO coverage. Addresses all Portable Storage Use objectives regarding external systems. Limit. Portable storage that may hold CUI is org-issued, hardware-encrypted, and only mountable on managed…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet Org-approved crypto module list; BitLocker and TLS configured to approved modes
AO coverage. Addresses all FIPS-validated cryptography objectives claimed for in-scope systems in this pattern. Approved modules. Maintain an inventory of cryptographic modules in use (OS FDE, TLS…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet- MP.L2-3.8.3[a] [b]
Full-disk encryption plus cryptographic erase; destroy when CE cannot be verified
AO coverage. Addresses all media sanitization objectives for this practice. Prerequisite. All in-scope endpoints use full-disk encryption with keys escrowed to the directory/MDM. Removable media that…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet