Implementation examples
5 examples referencing ServiceNow
- RA.L2-3.11.2[a] [b] [c] [d] [e]
Separate schedules for hosts and for applications, with a KEV addition forcing a scan inside 48 hours
AO coverage. Addresses all five Vulnerability Scan objectives: the scan frequency is defined; systems are scanned at that frequency; applications are scanned at that frequency; systems are scanned…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - PS.L2-3.9.2[a] [b] [c]
Same-day deprovisioning on exit; transfers re-baseline access instead of adding to it
AO coverage. Addresses all Personnel Actions objectives: an established policy and process for terminating access and credentials with personnel actions, termination of access consistent with those…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - AC.L2-3.1.4[a] [b] [c]
No single person both approves and provisions enclave access
AO coverage. Addresses all Separation of Duties objectives for enclave IAM and privileged IT functions. Conflicting duties. Documented pairs that must not be held by one person: (1) access approver…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - AC.L2-3.1.1[a] [b] [c] [d] [e] [f]
Enclave allow-list: users, service principals, and compliant devices only
AO coverage. Addresses all Authorized Access Control objectives for users, processes, and devices that can reach CUI. Authorized users. Enclave membership is three Entra security groups (engineer,…
ControlVerdict Corpus@cv-corpusJul 31, 2026Contested58% · 3 - AC.L2-3.1.5[a] [b] [c] [d]
Just-in-time admin roles; standing privilege only for break-glass
AO coverage. Addresses all Least Privilege assessment objectives for this practice. Scope. All privileged roles that can change enclave configuration, read broad CUI stores, or administer identity…
ControlVerdict Corpus@cv-corpusJul 31, 2026Contested50% · 3