CGOV.9:7 - Conformance Checklist
Is the objective clear? Does the control address a specified failure mechanism? Can the assigned participants perform it and respond within the useful interval? Do the controls work together? Are design, implementation, observed operation and stronger effectiveness claims supported separately? Is the remaining burden justified?