Assurance workspace / Synthetic sample
Inspect the
conclusion.
A reproducible assessment of configured sample signals. Missing evidence and manual review remain visible.
Generated 2026-09-20T10:37:23.261667Z · Not live client telemetry
6Passed configured tests
3Failed configured tests
10Control results
| Control | Test | State | Owner | Reason |
|---|---|---|---|---|
| IAM-001 | Administrative access requires MFA | PASS | Identity and Access Management | All observed administrative identities are protected by MFA |
| IAM-002 | Wildcard administrative grants are prohibited | PASS | Cloud Security | No wildcard administrative grant was detected |
| EVD-001 | Control evidence remains within the freshness SLA | PASS | GRC Operations | Evidence is within the configured 30-day freshness SLA |
| AI-001 | AI systems have an accountable owner | FAIL | AI Governance | At least one AI system lacks an accountable owner |
| AI-050-1 | Direct AI interaction disclosure | PASS | Product and Legal | The product exposes the configured AI-interaction disclosure |
| AI-050-2 | Synthetic output marking is machine-readable and detectable | FAIL | AI Platform | Machine-readable marking was not demonstrated |
| TPRM-001 | Critical vendors have current assurance evidence | FAIL | Third-Party Risk | At least one critical vendor lacks current assurance evidence |
| GDPR-28-1 | Processor agreement and subprocessor terms require legal review | MANUAL_REVIEW | Privacy and Legal | Contract terms, controller/processor roles, transfer mechanisms, and Article 28 sufficiency require qualified legal review. |
| DLP-001 | Sensitive prompt egress is blocked or approved | PASS | Security Engineering | No unapproved sensitive-data egress event was observed |
| REM-001 | Critical findings meet remediation SLA | PASS | Risk Owners | No critical finding is overdue |
What this supports
These results show how the configured rules handle supplied sample signals. They do not establish legal compliance, operating effectiveness over an audit period or certification.
The complete source records, test logic and review boundaries are available in the repository.