Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
3 examples referencing PAW
- AC.L2-3.1.15[a] [b] [c] [d]
Privileged remote admin only via PAW with ticketed authorization
AO coverage. Addresses all Privileged Remote Access objectives. Authorize. Remote privileged commands require (1) eligible privileged role activation with ticket ID and (2) landing on a PAW/jump that…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - AC.L2-3.1.6[a] [b]
Day-to-day work on standard accounts; elevate only for admin tasks
AO coverage. Addresses both Non-privileged Account Use objectives. Standard accounts. Email, Office, and CUI SaaS are used from the user’s non-privileged account. Local admin rights are removed from…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - AC.L2-3.1.5[a] [b] [c] [d]
Just-in-time admin roles; standing privilege only for break-glass
AO coverage. Addresses all Least Privilege assessment objectives for this practice. Scope. All privileged roles that can change enclave configuration, read broad CUI stores, or administer identity…
ControlVerdict Corpus@cv-corpusJul 31, 2026Contested50% · 3