Auditor export pack

Meridian Pay (synthetic demo) · Cyber Trust mark - Promoter (PLACEHOLDER content) · SS712:2025-PLACEHOLDER

Export v1 · generated 2026-06-04 · crosswalk ctm-ss712-2025-placeholder.v1

ctm-assessor-intake-v1 · all scoped controls

Readiness snapshot prepared for accredited-assessor review — not a certification. The Cyber Trust mark is issued by an accredited assessor. Synthetic demo data only.

83%

weighted readiness · 4 met · 2 partial · 0 missing · 1 signed evidence pack(s) · 0 parsed artifact(s) · 0 accepted review(s)

Certification-body intake assumptions

CyberG7 provides a pre-audit readiness pack. Certification and pass/fail decisions remain with the appointed certification body or assessor.
Evidence freshness, parser confidence, and review decisions are evaluated at export time and must be rechecked if the assessment window changes.
Workbook provenance points back to the pinned CSA Cyber Trust mark self-assessment checklist catalog used to create the evidence task.
Parser output is deterministic evidence triage metadata. It does not replace assessor sampling, interviews, or professional judgment.
Controls marked partial or missing should not be represented as certification-ready until fresh evidence is accepted by a human reviewer.

Controls

Control	Source	State	Evidence posture	Assessor note	Cross-framework
AC-1 MFA on privileged and remote access	Access Control	READY met	2 fresh / 0 stale 0 accepted · no parsed artifacts	Pre-audit ready: control has fresh evidence and has been marked ready.	A.8.5, CC6.1
ASM-1 Asset inventory maintained	Asset Management	READY met	1 fresh / 0 stale 0 accepted · no parsed artifacts	Pre-audit ready: control has fresh evidence and has been marked ready.	A.5.9, CC6.1
DP-1 Data protection and tested backups	Data Protection	PENDING partial	2 fresh / 0 stale 0 accepted · no parsed artifacts	Partial: evidence exists, but closure still needs accepted review, refresh, or remaining control work.	A.8.24, CC6.7
GOV-1 Cybersecurity governance and ownership	Governance	READY met	1 fresh / 0 stale 0 accepted · no parsed artifacts	Pre-audit ready: control has fresh evidence and has been marked ready.	A.5.1, CC1.1
IR-2 Incident response capability is tested	Incident Response	IN PROGRESS partial	2 fresh / 0 stale 0 accepted · no parsed artifacts	Partial: evidence exists, but closure still needs accepted review, refresh, or remaining control work.	A.5.24, CC7.3
LOG-1 Central security logging	Logging and Monitoring	READY met	2 fresh / 0 stale 0 accepted · no parsed artifacts	Pre-audit ready: control has fresh evidence and has been marked ready.	A.8.15, CC7.2

Signed evidence — the fusion · 1

Evidence ID	Kind	Signature (ed25519)
evp_demo_soc_0001	response_action	ed25519:VoKCmDUZOK49zBn38D7GP6…