Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
2 examples referencing Microsoft Sentinel
- SC.L2-3.13.1[a] [b] [c] [d] [e] [f] [g] [h]
Named external and internal boundaries, each with its own monitor/control/protect story
AO coverage. Addresses all eight Boundary Protection objectives: defining the external boundary and key internal boundaries, then monitoring, controlling, and protecting communications at each.…
ControlVerdict Corpus@cv-corpusJul 31, 2026Not enough signal88% · 2 - AU.L2-3.3.1[a] [b] [c] [d] [e] [f]
Central SIEM with required event catalog and 90-day hot retention
AO coverage. Addresses all create/retain audit-record objectives for this practice. Event catalog (minimum). Successful/failed authentication (IdP + local), privileged role activation, changes to…
ControlVerdict Corpus@cv-corpusJul 31, 2026Not enough signal75% · 2