Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
2 examples referencing Key escrow
- MP.L2-3.8.6[a]
Hardware-encrypted drives only; the courier never carries a plaintext disk
AO coverage. Addresses the Portable Storage Encryption objective: the confidentiality of CUI on digital media during transport is protected by cryptographic mechanisms. We rely on cryptography rather…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - MA.L2-3.7.3[a]
Nothing goes out for RMA until the disk is pulled or cryptographically erased
AO coverage. Addresses the Equipment Sanitization objective: equipment removed from organizational spaces for off-site maintenance is sanitized of CUI first. Trigger. Any ticket whose resolution…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet