Skip to main content

Verified Controls

Controls that are fully implemented in the current platform release. These have been verified through code review and/or testing.

36 controls with this tag.

IDTitleStatusOwnerCSF Function
SID-ACCESS-01Multi-Tenant Isolationverifiedplatformprotect
SID-ACCESS-02Rate Limiting and Brute-Force Protectionverifiedplatformprotect
SID-ACCESS-03User Consent Before Credential Disclosureverifiedplatformprotect
SID-ACCESS-04SPOCP Policy-Based Query Authorizationverifiedplatformprotect
SID-AUDIT-01Structured Security Event Loggingverifiedplatformdetect
SID-AUTH-01FIDO2/WebAuthn Passwordless Authenticationverifiedplatformprotect
SID-AUTH-02JWT Bearer Token Session Managementverifiedplatformprotect
SID-AUTH-03OIDC Gate for External Identity Providersverifiedplatformprotect
SID-AUTH-04WebSocket JWT Handshake Authenticationverifiedplatformprotect
SID-CRYPTO-01PKCS#11 HSM Key Protectionverifiedplatformprotect
SID-CRYPTO-02PRF Extension Key Derivationverifiedplatformprotect
SID-CRYPTO-03AES-256-GCM Encrypted Keystoreverifiedplatformprotect
SID-CRYPTO-04COSE Sign1 and mDOC Cryptographyverifiedplatformprotect
SID-CRYPTO-05Secure Random Number Generationverifiedplatformprotect
SID-DATA-01SD-JWT Selective Disclosureverifiedplatformprotect
SID-DATA-02mDOC Element-Level Selective Disclosureverifiedplatformprotect
SID-DATA-03Credential Revocation via Token Status Listverifiedplatformprotect
SID-DATA-04VCTM Schema Validationverifiedplatformprotect
SID-DATA-05Gate/Remove Dead VC/VP Storage Pathsverifiedplatformprotect
SID-HARD-01Error Message Sanitizationverifiedplatformprotect
SID-HARD-02Input Validation and Injection Preventionverifiedplatformprotect
SID-HARD-03Network Segmentation (Separate Server Ports)verifiedplatformprotect
SID-HARD-04Secure Registration Enforcementverifiedplatformprotect
SID-HARD-05Browser Security Controlsverifiedplatformprotect
SID-KEY-01WSCA WebSocket Key Signing Delegationverifiedplatformprotect
SID-KEY-02IACA Certificate Managementverifiedplatformprotect
SID-PRIV-01Minimal Disclosure Enforcementverifiedplatformprotect
SID-PRIV-02VP Nonce Binding (Anti-Replay)verifiedplatformprotect
SID-TRANS-01TLS 1.2+ Minimum with Configurable Versionverifiedplatformprotect
SID-TRANS-02OpenID4VCI Credential Issuance Protocolverifiedplatformprotect
SID-TRANS-03OpenID4VP Credential Presentation Protocolverifiedplatformprotect
SID-TRANS-04SSRF-Protected HTTP Clientverifiedplatformprotect
SID-TRUST-01AuthZEN PDP Trust Evaluation Serviceverifiedplatformidentify
SID-TRUST-02Multi-Registry Trust Framework Supportverifiedplatformidentify
SID-TRUST-03Issuer and Verifier Trust Gatingverifiedplatformprotect
SID-TRUST-04Trust Decision Caching with Circuit Breakerverifiedplatformprotect