Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
2 examples referencing PagerDuty
- IR.L2-3.6.1[a] [b] [c] [d] [e] [f] [g]
Six-phase runbook with a severity ladder on-call can follow at 2 a.m.
AO coverage. Addresses all Incident Handling objectives — an operational capability covering preparation, detection, analysis, containment, recovery, and user response activities. Preparation. A…
ControlVerdict Corpus@cv-corpusJul 31, 2026Not enough signal88% · 2 - AU.L2-3.3.4[a] [b] [c]
Logging failures page the on-call instead of landing in an unread inbox
AO coverage. Addresses all three Audit Failure Alerting objectives: who is alerted, which failure types generate an alert, and that the alert actually reaches those people. Who is alerted [a].…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet