System: example-finance-app (fictional). Mode: local read-only demonstration.
Results: PASS 3 / FAIL 2 / UNKNOWN 0 / ERROR 0
Generated from synthetic fixtures. Not a real organization, assurance opinion, or NIST compliance assessment.
| ID | Result | Field | Observed | Evidence source |
|---|---|---|---|---|
MFA-001 | FAIL | identity.admin_mfa | false | snapshot:example-finance-app |
LOG-001 | PASS | audit.central_logging | true | snapshot:example-finance-app |
ENC-001 | PASS | storage.encrypted | true | snapshot:example-finance-app |
PRIV-001 | FAIL | identity.privileged_accounts | 3 | snapshot:example-finance-app |
BKP-001 | PASS | backup.days_since_test | 12 | fixture-evidence:fictional-backup-job-export |
Local, fictional OSCAL-style samples. Changes may be editorial and require human interpretation.
AC-02: MODIFIED. Mapped tests: MFA-001, PRIV-001. Human review required.AU-12: ADDED. Mapped tests: LOG-001. Human review required.MFA-001: Investigate nonconforming state and validate with a control owner.PRIV-001: Investigate nonconforming state and validate with a control owner.AC-02: Review standards change and associated organizational tests: MFA-001, PRIV-001.AU-12: Review standards change and associated organizational tests: LOG-001.evaluate_controlslookup_local_evidenceevaluate_controlscompare_catalog_versionsEach tool invocation in the JSON report also records input and output SHA-256 digests. No changes to system configuration were made.