Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
3 examples referencing Endpoint protection
- SI.L2-3.14.5[a] [b] [c]
Weekly full scans plus real-time scanning of every externally sourced file
AO coverage. Addresses all three System & File Scanning objectives: the scan frequency is defined, periodic scans happen at that frequency, and files from external sources are scanned in real time.…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - SI.L2-3.14.4[a]
Definitions update automatically within hours; stale-definition devices lose CUI access
AO coverage. Addresses the single Update Malicious Code Protection objective across every location designated for malicious code protection. Automatic by default. Signature and intelligence updates…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - SI.L2-3.14.2[a] [b]
Designated locations named on paper: endpoints, mail, portal uploads, and the build tier
AO coverage. Addresses both Malicious Code Protection objectives: the designated locations are identified, and protection is provided at each of them. Designated locations identified [a]. Rather than…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet