Skip to content

CIS Controls v8 Example

An example Evidence Package for a CIS Controls v8 assessment.

Endpoint Protection (CIS Control 10)

{
  "aces_version": "0.1",
  "id": "ev_01JNKCIS10001",
  "collected_at": "2026-03-22T00:00:00Z",
  "tenant": {
    "company_id": "msp-acme",
    "client_id": "client-acme-corp"
  },
  "connector": {
    "connector_type_id": "sentinelone",
    "last_sync_status": "success"
  },
  "evidence_type": "endpoint_protection",
  "description": "EDR agent active and reporting on 98 of 100 managed endpoints",
  "control_mappings": [
    { "framework": "cis-v8", "control_id": "10.1" },
    { "framework": "cis-v8", "control_id": "10.2" }
  ],
  "metrics": [
    { "category": "endpoint_protection", "metric_key": "agents_total",            "metric_value": "100", "metric_type": "count",      "unit": "devices" },
    { "category": "endpoint_protection", "metric_key": "agents_online",           "metric_value": "98",  "metric_type": "count",      "unit": "devices" },
    { "category": "endpoint_protection", "metric_key": "agents_online_percentage","metric_value": "98.0","metric_type": "percentage", "unit": "%" }
  ],
  "metadata": {
    "tags": ["endpoint", "edr", "sentinelone"],
    "expires_at": "2026-04-22T00:00:00Z"
  }
}

Patch Management (CIS Control 7)

{
  "aces_version": "0.1",
  "id": "ev_01JNKCIS07001",
  "collected_at": "2026-03-22T00:00:00Z",
  "tenant": {
    "company_id": "msp-acme",
    "client_id": "client-acme-corp"
  },
  "connector": {
    "connector_type_id": "ninjarmm",
    "last_sync_status": "success"
  },
  "evidence_type": "patch_management",
  "description": "85% of endpoints patched within 30 days of release",
  "control_mappings": [
    { "framework": "cis-v8", "control_id": "7.1" },
    { "framework": "cis-v8", "control_id": "7.2" }
  ],
  "metrics": [
    { "category": "patch_management", "metric_key": "devices_total",           "metric_value": "100", "metric_type": "count",      "unit": "devices" },
    { "category": "patch_management", "metric_key": "patches_pending",         "metric_value": "15",  "metric_type": "count",      "unit": "patches" },
    { "category": "patch_management", "metric_key": "patch_compliance_percent","metric_value": "85.0","metric_type": "percentage", "unit": "%" }
  ]
}