Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
3 examples referencing Microsoft Purview labels
- MP.L2-3.8.4[a] [b]
Marking happens at creation: label templates, document headers, drive faceplates
AO coverage. Addresses both Media Markings objectives: media containing CUI is marked with the applicable CUI markings and with distribution limitations. Marking at creation, not at audit. Templates…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - AC.L2-3.1.19[a] [b]
Encrypt CUI containers on phones; no local unmarked copies
AO coverage. Addresses both Encrypt CUI on Mobile objectives. Encryption. CUI is opened only in managed apps with encryption-at-rest for app data. Save-as to unmanaged local storage is blocked.…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - AC.L2-3.1.3[a] [b] [c] [d] [e]
CUI only in labeled libraries; DLP blocks unlabeled egress
AO coverage. Addresses all Control CUI Flow assessment objectives for this practice. Authoritative store. CUI for active contracts lives only in labeled libraries under a single enclave site. Desktop…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet