Terms of Use
Not an assessment or legal advice
Everything on this site is community opinion. It is not an assessment, certification, determination by any authority, or legal or contractual advice. Only your assessment organization can decide whether your implementation meets a requirement.
The service
ControlVerdict hosts sanitized implementation examples and community verdicts tied to compliance control text. We may change, suspend, or discontinue features. We provide the service “as is” without warranties of fitness for a particular assessment outcome.
Accounts
- Reading is open without an account. Contributing requires signing in.
- You are responsible for activity under your account. Keep access to your email (and any OAuth provider) secure.
- We may suspend or ban accounts for abuse, unsanitized content, spam, or other violations. Privileged actions are logged.
Your content
- You retain rights in content you submit. You grant us a non-exclusive license to host, display, moderate, and distribute it as part of operating the service.
- You must not post Controlled Unclassified Information, client-identifying detail, or other non-public sensitive material. See Sanitization rules.
- You must not post unlawful content, malware, or material that infringes others’ rights. Do not attempt to disrupt the service or probe other users’ accounts without permission.
- We may remove or restore content, and soft-delete records so discussions keep structure. Removal for being “wrong” on a control is not how the product works — verdicts exist to express disagreement in public.
Normative text
Practice statements and assessment objectives are quoted from NIST publications and related CMMC guidance as described on the About page. Those works of the U.S. federal government are not subject to copyright in the United States. ControlVerdict is not affiliated with or endorsed by NIST, the Department of Defense, the Cyber AB, or any C3PAO.
Privacy
How we handle account and operational data is described in the Privacy Policy.
Limitation of liability
To the fullest extent permitted by law, we are not liable for decisions you make based on community content, for assessment outcomes, or for indirect or consequential damages arising from use of the service. If liability cannot be excluded, it is limited to the greater of fees you paid us for the service in the prior twelve months (if any) or one hundred U.S. dollars.
Contact
Security and privacy: security@controlverdict.com. Related: Security.