Assess
Migration Control Library
Structured library of Directory migration controls. Each control traces to tests, findings and evidence.
Pass126
Action required13
Critical5
Not assessed5
Exception0
13 of 13
| Method | Evidence | |||||||
|---|---|---|---|---|---|---|---|---|
| CERT-001 | Certificate expiry monitoring | Certificates | Low | 2 | Certificate inspection | PASS | 1 | 12 Sept, 13:05 |
| CERT-002 | SAN/CN policy enforced | Certificates | Medium | 2 | Engineer attestation | PASS | 1 | 08 Sept, 14:05 |
| CERT-003 | EKU validation | Certificates | Low | 2 | Architecture review | PASS | 1 | 09 Sept, 15:05 |
| CERT-004 | Certificate inventory complete | Certificates | Low | 1 | Configuration scan | PASS | — | 10 Sept, 16:05 |
| CERT-005 | QWAC/QSealC distinction | Certificates | Low | 2 | API probe | PASS | 1 | 11 Sept, 17:05 |
| CERT-006 | Certificate pinning removed | Certificates | Medium | 2 | Static analysis | PASS | 1 | 12 Sept, 18:05 |
| CERT-007 | Key usage validated | Certificates | High | 2 | Network probe | PASS | 1 | 08 Sept, 10:05 |
| CERT-008 | Certificate renewal runbook | Certificates | Low | 2 | Certificate inspection | PASS | 1 | 09 Sept, 11:05 |
| CERT-009 | Signing certificate rotation tested | Certificates | Low | 2 | Engineer attestation | PASS | 1 | 10 Sept, 12:05 |
| CERT-010 | Transport certificate rotation tested | Certificates | Medium | 2 | Architecture review | ACTION REQUIRED | — | 11 Sept, 13:05 |
| CERT-011 | Certificate CN policy for sandbox | Certificates | Low | 1 | Configuration scan | PASS | 1 | 12 Sept, 14:05 |
| CERT-012 | Wildcard certificates prohibited | Certificates | Low | 2 | API probe | PASS | — | 08 Sept, 15:05 |
| CERT-013 | Certificate issuance SLA | Certificates | Low | 2 | Static analysis | PASS | 1 | 09 Sept, 16:05 |