| Field | Value |
|---|---|
| Control identifier | |
| Purpose | |
| Risk addressed | |
| Control statement (a condition that could be false) | |
| Type (preventive / detective / responsive) | |
| Enforcement point (tool layer / identity / assembly / human) | |
| Applicability (agents, tiers, environments) | |
| Test method | |
| Evidence required | |
| Threshold | |
| Status (pass / fail / missing / not applicable / review) | |
| Last evaluated | |
| Owner | |
| Remediation path | |
| Release effect on failure | |
| Framework references (metadata only) |