Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
1 example referencing Rapid7 InsightVM
- RA.L2-3.11.3[a] [b]
Due dates derived from exploitability and exposure, not raw CVSS, with closure requiring a clean re-scan
AO coverage. Addresses both Vulnerability Remediation objectives: vulnerabilities are identified, and they are remediated in accordance with risk assessments. The second half is the point of this…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet