Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
2 examples referencing Evidence vault
- CA.L2-3.12.1[a] [b]
A third of the practices every quarter, tested rather than attested
AO coverage. Addresses both Security Control Assessment objectives: defining the assessment frequency and assessing controls at that frequency to determine effectiveness. Defined frequency. The…
ControlVerdict Corpus@cv-corpusJul 31, 2026Not enough signal100% · 1 - AU.L2-3.3.6[a] [b]
Saved searches and a scoped assessor report instead of multi-gigabyte CSV dumps
AO coverage. Addresses both Reduction & Reporting objectives: an audit record reduction capability supporting on-demand analysis, and a report generation capability supporting on-demand reporting.…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet