{
  "$schema": "https://fedramp.gov/schemas/fedramp-security-decision-record-schema-2026-06-24.json",
  "certificationPackageOverviewUri": "https://trust.mognet.work/public/info.json",
  "fedRampRequirements": [
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "AFC-CSO-INB",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "AFC-CSO-NOC",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "AFC-CSO-TFG",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "AFC-CSO-RCV",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "AFC-CSO-CRA",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "AFC-CSO-EMR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "AFC-CSO-IMA",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "AFC-CSO-ACK",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-OCR-AVL",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-OCR-NRD",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-OCR-FBM",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-OCR-AFS",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-OCR-LSI",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-OCR-SOR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-OCR-RPS",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-QTR-MTG",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-QTR-REG",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-QTR-NRD",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-QTR-NID",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-QTR-SAR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-QTR-ACT",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-QTR-RTR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-QTR-RTP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-QTR-SRR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CCM-QTR-SCR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-CSO-PUB",
      "frrImplementation": [
        "1. The public page and the certification package overview share the provider name, service name, description, service model, deployment model, website, logo, FedRAMP ID, security contact, trust center address, and the service list. An assessor, a next report date, a public secure configuration guide, and service security categories are not available.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Partially Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-CSO-SVC",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-CSO-FID",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-CSO-FRC",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-CSO-AVR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-CSO-UTC",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-CSO-CBF",
      "frrImplementation": [
        "1. The public page and the public JSON files are produced by the same functions from the same stored evidence. There is no separate copy that can drift.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-CSO-RIS",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-CSO-IRP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-CSO-HAD",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-CSO-PSM",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-CSO-RPS",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-TRC-USH",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-TRC-PAC",
      "frrImplementation": [
        "1. Every public certification file linked from this page is available with an unauthenticated GET. The HTML page is the human-readable form of the same data.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-TRC-AAI",
      "frrImplementation": [
        "1. No federal agency user or system has been granted access to certification data. The current inventory and the history are published at /public/access.json. Public files do not require an agency account.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-TRC-ACL",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-TRC-HMR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-TRC-SSM",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-UTC-AAD",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CDS-UTC-AGA",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CMU-CSO-CMD",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CMU-CSO-UVM",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CMU-CSO-CAT",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CPO-CSO-OVR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CPO-CSO-MTD",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CPO-CSO-OSA",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "CPO-CSX-CPM",
      "frrImplementation": [
        "1. Class C asks that the certification package stay current at least every two weeks. This record is built when the page is opened, from the latest stored evidence for the selected date. The rest of the package is not supplied with it. No senior official has accepted this gap.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CSO-FCP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CSO-PKG",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CSO-JSN",
      "frrImplementation": [
        "1. Public JSON responses use Content-Type application/json, X-Content-Type-Options nosniff, and Cross-Origin Resource Sharing that allows another website to read them. The certification package overview and the security decision record validate against their FedRAMP schemas. The other package documents are not supplied.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Partially Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CSO-MRA",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CSO-POP",
      "frrImplementation": [
        "1. This cloud service offering is not seeking a FedRAMP Rev5 program certification. The rules in use are the FedRAMP 20x set.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CLA-ASF",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CLA-EAM",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CLA-MFR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CLA-RFR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CLA-OFR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CLA-IVV",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-APP-MLF",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-APP-AFC",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-APP-FCP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-APP-FIA",
      "frrImplementation": [
        "1. Class C requires a fresh assessment by a FedRAMP-recognized independent assessor within the previous three months. There is no such assessment. No senior official has accepted this gap.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-APP-NTP",
      "frrImplementation": [
        "1. No FedRAMP certification application has been submitted. Mog Network LLC will submit any future application itself. No assessor or other third party is authorized to apply.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-APP-USA",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-APS-ATO",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CCL-UCC",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CCL-DCC",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CCL-DNP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CSX-VVK",
      "frrImplementation": [
        "1. Class C requires at least two automated checks for every Key Security Indicator. The record counts them from the catalog on each build and names every indicator whose count is under two. Those indicators are KSI-CED-RAT, KSI-CMT-RVP, KSI-CNA-OFA, KSI-CNA-RVP, KSI-INR-AAR, KSI-INR-RIR, KSI-INR-RPI, KSI-MLA-RVL, KSI-PIY-RES, KSI-PIY-RIS, KSI-PIY-RSD, KSI-PIY-RVD, KSI-RPL-ARP, KSI-RPL-RRO, KSI-RPL-TRC, KSI-SCR-MIT, KSI-SVC-EIS, KSI-SVC-PRR, KSI-SVC-RUD, KSI-SVC-VCM, KSI-SVC-VRI. This stays Not Implemented until every indicator has two automated checks that can actually complete. A second check that does nothing will not be added to change this status. No senior official has accepted this gap.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CSX-VVR",
      "frrImplementation": [
        "1. This record is built from the evidence and the rule catalog when the page is opened. Most rules have no automated check.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Partially Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "FRC-CSX-MAS",
      "frrImplementation": [
        "1. These checks run in all four accounts, and one failed account fails the combined row. Many checks look only at roles and stacks this baseline deployed. There is no finished minimum-assessment-scope boundary. No senior official has accepted this gap.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IEC-CSO-EFR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IEC-CSO-DPR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IEC-CSO-IIR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IEC-CSO-OIR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IEC-CSO-FIR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IEC-CSO-EFI",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IEC-CSO-AIR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IVV-CSO-FIA",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IVV-CSO-SEI",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IVV-CSO-SEE",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IVV-CSO-ICP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IVV-CSO-DUS",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IVV-CSO-STE",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IVV-CSO-USR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IVV-CSO-RAA",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "IVV-CSX-AIA",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "MAS-CSO-IIR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "MAS-CSO-FLO",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "MAS-CSO-TPR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "MAS-CSO-MDI",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "MAS-CSO-SUP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "MKT-CSO-MLR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "MKT-CSO-PML",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "MKT-IIP-AGU",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "MKT-IIP-DCP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "MKT-IIP-DLA",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCG-CSO-RSC",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCG-CSO-AUP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCG-CSO-PUB",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCG-CSO-SDF",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCG-ENH-CMP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCG-ENH-EXP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCG-ENH-API",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCG-ENH-MRG",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCG-ENH-VRH",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-CSO-EVA",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-CSO-MAR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-CSO-INF",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-CSO-HIS",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-CSO-HRM",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-CSO-ARI",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-CSO-NOM",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-CSO-EMG",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-ADP-NTF",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-RTR-NNR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-TRF-NIP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-TRF-NFP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-TRF-NAF",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-TRF-NAV",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-TRF-UPD",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SCN-TRF-TPR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SDR-CSO-FRR",
      "frrImplementation": [
        "1. For each rule, this record says how we follow it or why we do not, and how we check our own work. Nobody outside Mog Network has verified this record. No assessor has sent comments.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Partially Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SDR-CSO-MTD",
      "frrImplementation": [
        "1. This record has a version, the time it was built, and the source of that update. The source is the scheduled AWS Lambda function.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SDR-CSX-KSI",
      "frrImplementation": [
        "1. Each indicator names its checks, how often they run, whether the automation is enough, and how we confirm the result is the one the job produced. A present explanation is not a claim that the indicator itself passed.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "SDR-CSX-KMT",
      "frrImplementation": [
        "1. Each indicator summarizes the past 30 days, summarizes the stored year, and lists every stored day with its result and whether validation finished. A full year is not available. No agreement to supply the missing history is invented.\n2. We compared this explanation with the rule. It matches what this tenant does.\n3. Opening the record rebuilds this text from the stored evidence, which is how we check that it still matches the result.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Partially Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-CSO-DET",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-CSO-RES",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-CSO-FAV",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-CSO-DFR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-CSO-ADT",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-CSO-DAC",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-CSO-MSP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-CSO-AKE",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-CSO-SIR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-TFR-NMV",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-TFR-PDD",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-TFR-PCD",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-TFR-PVR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-TFR-RMN",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-TFR-KEV",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-TFR-PSD",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VDR-TFR-MVX",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-EVA-ELX",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-EVA-EIR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-EVA-EPA",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-EVA-AIA",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-EVA-GRV",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-EVA-EFP",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-EVA-EFA",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-RPT-PER",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-RPT-VDT",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-RPT-AVI",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-RPT-NID",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-RPT-HLO",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-RPT-RPD",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-TFR-MHR",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-TFR-MAV",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-TFR-MRH",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-TFR-EVU",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-TFR-IRI",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    },
    {
      "frrAssessment": [
        "Assessor comments: none."
      ],
      "frrID": "VER-TFR-NRI",
      "frrImplementation": [
        "1. We do not follow this rule. A customer cannot rely on it. No senior official has accepted this gap.\n2. We looked through the checks. None of them covers this rule, so this is not a finished control.\n3. Nothing is running for this rule, so there is no result to confirm.\n4. Independent verification: none.\n5. Independent validation: none.\n6. Assessor comments: none.\n7. Rule-specific file: none."
      ],
      "frrImplementationStatus": "Not Implemented",
      "frrValidation": [
        "Independent verification: none.",
        "Independent validation: none."
      ]
    }
  ],
  "keySecurityIndicators": [
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-CED-RAT",
      "ksiImplementation": [
        "Status: Implemented.",
        "The effectiveness of relevant cybersecurity education and training is persistently reviewed, including at least general training for all employees, role-specific training for employees in high risk roles, training for development and engineering staff on secure software delivery, and training for staff involved with incident response or disaster recovery.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-CMT-LMC",
      "ksiImplementation": [
        "Status: Implemented.",
        "Modifications to the cloud service offering are logged and monitored.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-CMT-RMV",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Changes to machine-based information resources are executed through the redeployment of version controlled resources rather than direct modification wherever reasonable.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-CMT-RVP",
      "ksiImplementation": [
        "Status: Implemented.",
        "The effectiveness of documented change management procedures is persistently reviewed.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-CMT-VTD",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Persistent testing and validation of changes throughout deployment is automated.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-CNA-DFP",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "The functionality and privileges for infrastructure and services are strictly defined.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-CNA-EIS",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Automated services are used to persistently assess the security of all machine-based information resources and automatically enforce their intended operational state.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-CNA-IBP",
      "ksiImplementation": [
        "Status: Implemented.",
        "The use and configuration of third-party machine-based information resources is persistently compared against the original provider's best practices and guidance.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-CNA-MAT",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Machine-based information resources are persistently reviewed to ensure they have a minimal attack surface and that lateral movement is minimized if compromised.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-CNA-OFA",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Machine-based information resources are persistently reviewed to ensure they are appropriately optimized for high availability and rapid recovery.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-CNA-RNT",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Machine-based information resources are persistently reviewed to ensure they are appropriately configured to limit inbound and outbound network traffic.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-CNA-RVP",
      "ksiImplementation": [
        "Status: Implemented.",
        "The effectiveness of protection against denial of service attacks and other unwanted activity for machine-based information resources is persistently reviewed.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-CNA-ULN",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Logical networking and related capabilities are used and persistently reviewed to enforce traffic flow controls.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-IAM-AAM",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "The lifecycle and privileges of all accounts, roles, and groups are securely managed using automation.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-IAM-APM",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Secure passwordless methods are used for user authentication and authorization when feasible, otherwise strong passwords with phishing-resistant MFA is used.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-IAM-ELP",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Identity and access management measures are used and persistently reviewed to ensure each user or device can only access the resources they need.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-IAM-JIT",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "A least-privileged, role and attribute-based, and just-in-time security authorization model is used and persistently reviewed for all user and non-user accounts and services.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-IAM-SNU",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Appropriately secure authentication methods are used and persistently reviewed for non-user accounts and services.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-IAM-SUS",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Accounts with privileged access are disabled or otherwise secured in response to suspicious activity.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-INR-AAR",
      "ksiImplementation": [
        "Status: Implemented.",
        "Incident after action reports are generated and lessons learned are persistently incorporated.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-INR-RIR",
      "ksiImplementation": [
        "Status: Implemented.",
        "The effectiveness of documented incident response procedures is persistently reviewed.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-INR-RPI",
      "ksiImplementation": [
        "Status: Implemented.",
        "Past incidents are persistently reviewed for patterns or vulnerabilities that were not previously apparent or identified.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-MLA-ALA",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "A least-privileged, role and attribute-based, and just-in-time access authorization model is used and persistently reviewed for access to log data based on organizationally defined data sensitivity.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-MLA-EVC",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "The configuration of machine-based information resources, especially infrastructure as code, is persistently evaluated and tested.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-MLA-LET",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "A list of information resources and event types that will be logged, monitored, and audited is maintained and persistently reviewed to ensure these activities occur.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-MLA-OSM",
      "ksiImplementation": [
        "Status: Implemented.",
        "A Security Information and Event Management (SIEM) or similar system(s) is used and persistently reviewed for centralized, tamper-resistant logging of events, activities, and changes.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-MLA-RVL",
      "ksiImplementation": [
        "Status: Implemented.",
        "Logs are persistently reviewed and audited.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-PIY-GIV",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Authoritative sources are used to automatically generate real-time inventories of all information resources when needed.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-PIY-RES",
      "ksiImplementation": [
        "Status: Implemented.",
        "Executive support for achieving the provider's security goals is persistently reviewed and demonstrated.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-PIY-RIS",
      "ksiImplementation": [
        "Status: Implemented.",
        "The effectiveness of the provider's investments in achieving security goals is persistently reviewed.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-PIY-RSD",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "The effectiveness of building security and privacy considerations into the Software Development Lifecycle and aligning with CISA Secure By Design principles is persistently reviewed.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 0 days, partial on 1 day, and fail on 0 days. In the stored days of the past year, the counts are 0 pass, 1 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 0 days, partial on 1 day, and fail on 0 days. In the stored days of the past year, the counts are 0 pass, 1 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-PIY-RVD",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "The effectiveness of the provider's vulnerability disclosure program is persistently reviewed.",
        "The combined result is partial."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-RPL-ABO",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "The alignment of machine-based information resource backups with defined recovery objectives is persistently reviewed.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-RPL-ARP",
      "ksiImplementation": [
        "Status: Implemented.",
        "The alignment of recovery plans with defined recovery objectives is persistently reviewed.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-RPL-RRO",
      "ksiImplementation": [
        "Status: Implemented.",
        "The desired Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) are defined and persistently reviewed for alignment with the provider's business needs and capabilities.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 0 days, partial on 0 days, and fail on 1 day. In the stored days of the past year, the counts are 0 pass, 0 partial, and 1 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 0 days, partial on 0 days, and fail on 1 day. In the stored days of the past year, the counts are 0 pass, 0 partial, and 1 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-RPL-TRC",
      "ksiImplementation": [
        "Status: Not Implemented.",
        "The capability to recover from incidents and contingencies aligned with defined recovery objectives is persistently tested.",
        "The combined result is fail."
      ],
      "ksiImplementationStatus": "Not Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-SCR-MIT",
      "ksiImplementation": [
        "Status: Implemented.",
        "Potential supply chain risks are persistently identified, reviewed, and mitigated.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 0 days, partial on 1 day, and fail on 0 days. In the stored days of the past year, the counts are 0 pass, 1 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 0 days, partial on 1 day, and fail on 0 days. In the stored days of the past year, the counts are 0 pass, 1 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-SCR-MON",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Third party software information resources are automatically monitored for upstream vulnerabilities using mechanisms that may include contractual notification requirements or active monitoring services.",
        "The combined result is partial."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-SVC-ACM",
      "ksiImplementation": [
        "Status: Implemented.",
        "The configuration of machine-based information resources is managed using automation and persistently reviewed for drift.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-SVC-ASM",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Management, protection, and regular rotation of digital keys, certificates, and other secrets is automated and persistently reviewed.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-SVC-EIS",
      "ksiImplementation": [
        "Status: Implemented.",
        "Information resources are persistently evaluated for opportunities to improve security and those improvements are persistently made.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 0 days, partial on 0 days, and fail on 1 day. In the stored days of the past year, the counts are 0 pass, 0 partial, and 1 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 0 days, partial on 0 days, and fail on 1 day. In the stored days of the past year, the counts are 0 pass, 0 partial, and 1 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-SVC-PRR",
      "ksiImplementation": [
        "Status: Not Implemented.",
        "Plans, procedures, and the state of information resources are persistently reviewed after making changes to limit and remove unwanted residual elements that would likely negatively affect the confidentiality, integrity, or availability of federal customer data.",
        "The combined result is fail."
      ],
      "ksiImplementationStatus": "Not Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 0 days, partial on 0 days, and fail on 1 day. In the stored days of the past year, the counts are 0 pass, 0 partial, and 1 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 0 days, partial on 0 days, and fail on 1 day. In the stored days of the past year, the counts are 0 pass, 0 partial, and 1 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-SVC-RUD",
      "ksiImplementation": [
        "Status: Not Implemented.",
        "Unwanted federal customer data is removed promptly when requested by an agency in alignment with customer agreements, including from backups if appropriate; this typically applies when a customer spills information or when a customer seeks to remove information from a service due to a change in usage.",
        "The combined result is fail."
      ],
      "ksiImplementationStatus": "Not Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-SVC-SIN",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Information is encrypted or otherwise secured from unwanted access or modification.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-SVC-VCM",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "The authenticity and integrity of communications between machine-based information resources is persistently validated using automation.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    },
    {
      "ksiAssessment": [
        "Assessment: No independent assessor has reviewed this indicator."
      ],
      "ksiEvidence": [
        {
          "evidenceDescription": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceLocation": "https://trust.mognet.work/public/summary.json",
          "evidenceText": "In the past 30 days, this indicator was pass on 1 day, partial on 0 days, and fail on 0 days. In the stored days of the past year, the counts are 1 pass, 0 partial, and 0 fail. A full year of daily results is not available yet.",
          "evidenceType": "Report",
          "lastUpdated": "2026-11-03"
        }
      ],
      "ksiId": "KSI-SVC-VRI",
      "ksiImplementation": [
        "Status: Partially Implemented.",
        "Use cryptographic methods to validate the integrity of machine-based information resources.",
        "The combined result is pass."
      ],
      "ksiImplementationStatus": "Partially Implemented",
      "ksiTests": [],
      "ksiValidation": [
        "Validation: The result on this report is the result the evidence job wrote for the selected day."
      ]
    }
  ],
  "metadata": {
    "lastUpdated": "2026-11-03T19:58:10Z",
    "updateSource": "Scheduled AWS Lambda function",
    "version": "1"
  }
}