Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
2 examples referencing Object storage
- MP.L2-3.8.9[a]
Backups encrypted with our own keys, with one immutable copy the domain cannot delete
AO coverage. Addresses the Protect Backups objective: the confidentiality of backup CUI is protected at storage locations. Encryption everywhere it rests. Backup jobs encrypt at the source before…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - AU.L2-3.3.8[a] [b] [c] [d] [e] [f]
Write-once archive in a separate account so a log admin cannot erase their own trail
AO coverage. Addresses all six Audit Protection objectives: audit information protected from unauthorized access [a], modification [b], and deletion [c], and the logging tools themselves protected…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet