Assessor room
Request threads, package snapshots, samples, and evidence receipts for external review.
Fixture

CTM Promoter assessor room

CTM promoter - Trustmark Assessor Example - read only access

1
3
1
1

Room posture

Opened 2026-07-01 00:00:00 UTC - expires 2026-08-31 00:00:00 UTC
open
assessor@trustmark-assessor.exampleAssessor contact
CSA-CTM-self-assessment-v202504Framework version
11Immutable events

Challenge loop

1 challenge threads bound to evidence and package snapshots
Challenge residual-risk evidence approval basis

evidence - AC-1:connector:okta:access_review

rejected
Package bindingsha256:demo-export-json-5b2a2b4a0d7f
Answer sources1 linked evidence
Human approvalsara.koh@meridianpay.example
Remediationatr_demo_challenge_remediati...
Answer quality71/100 - quality review required
Sources1/1 fresh
Evidence confidence42/100
Claim guardclean
B.3.6okta:access_review
fresh42/100 lowusr_demo_compliance

Request queue

4 request threads ordered by action risk
Residual-risk acceptance evidencehigh

B.3.6 - evidence request - due 2026-07-05 00:00:00 UTC

waiting on assessorAC-1:connector:okta:access_review
1. createdopen -> open - 2026-07-01 02:00:00 UTC

Assessor asked for management sign-off over the residual-risk acceptance evidence.

2. evidence linkedopen -> waiting on assessor - 2026-07-02 00:00:00 UTC

Linked the approved risk-register package and regenerated the assessor pack.

Challenge residual-risk evidence approval basishigh

B.3.6 - assessor challenge - due 2026-07-06 00:00:00 UTC

rejectedevidence1 sourcesquality review required
waiting on customerAC-1:connector:okta:access_review
1. createdopen -> open - 2026-07-03 00:00:00 UTC

Assessor challenged whether the residual-risk evidence shows explicit management approval.

2. customer responseopen -> waiting on assessor - 2026-07-03 01:00:00 UTC

Compliance lead approved the evidence-grounded response before sharing it externally.

3. challenge decisionwaiting on assessor -> waiting on customer - 2026-07-03 02:00:00 UTC

Assessor rejected the evidence and requested signed management approval.

4. remediation task createdwaiting on customer -> waiting on customer - 2026-07-03 02:05:00 UTC

Created remediation task atr_demo_challenge_remediation.

Confirm privileged-access sample scopemedium

B.15.3 - sample question - due 2026-07-08 00:00:00 UTC

waiting on customerNone
1. createdopen -> open - 2026-07-02 05:00:00 UTC

Assessor selected privileged-access review as an interview sample.

2. assessor commentopen -> waiting on customer - 2026-07-03 00:00:00 UTC

Confirm whether contractor privileged accounts are included in the sample.

Regenerate package after B.3.6 updatelow

Package - package regeneration - due Unspecified

closedNone
1. createdopen -> open - 2026-07-02 00:30:00 UTC

Package regeneration queued after evidence update.

2. package regeneratedopen -> waiting on assessor - 2026-07-02 00:45:00 UTC

Assessor package snapshot captured with updated evidence receipts.

3. closedwaiting on assessor -> closed - 2026-07-02 01:00:00 UTC

Snapshot reviewed and closed for assessor-room v0 demo.

Package snapshot

Post B.3.6 evidence update - 2026-07-02 00:45:00 UTC
ctm-assessor-package-v2
83%6 controls bound into manifest v2
sha256:demo-export-json-5b2a2b4a0d7fsha256:demo-workpaper-html-1d9c4af02bb1sha256:demo-evidence-manifest-3f9caa85e118
usr_demo_compliance2026-07-02 00:45:00 UTC

Approved package regeneration after assessor request.

Selected samples

AC-1Selected because assessor requested residual-risk acceptance evidence.
ASM-1Selected as representative Promoter-scope evidence for package walkthrough.
DP-1Selected as representative Promoter-scope evidence for package walkthrough.
GOV-1Selected as representative Promoter-scope evidence for package walkthrough.
IR-2Selected as representative Promoter-scope evidence for package walkthrough.

Evidence receipts

AC-1okta:access_review
AC-1okta:mfa_privileged
ASM-1aws:asset_inventory
DP-1crowdstrike:device_encryption
DP-1tnt_demo/manual/DP-1/encryption-and-backup-policy.pdf

Package exceptions

DP-1Manual task pending (due 2026-06-30)
IR-2Control in progress