Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
2 examples referencing Sandbox detonation
- SI.L2-3.14.5[a] [b] [c]
Weekly full scans plus real-time scanning of every externally sourced file
AO coverage. Addresses all three System & File Scanning objectives: the scan frequency is defined, periodic scans happen at that frequency, and files from external sources are scanned in real time.…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - SI.L2-3.14.2[a] [b]
Designated locations named on paper: endpoints, mail, portal uploads, and the build tier
AO coverage. Addresses both Malicious Code Protection objectives: the designated locations are identified, and protection is provided at each of them. Designated locations identified [a]. Rather than…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet