Control health
Controls remain not-tested until evidence supports an assessment. Health scores degrade for ineffective controls, stale evidence and unresolved exceptions.
The CRG Control Plane maintains a living view of AI control effectiveness, evidence freshness, monitoring signals, exceptions, remediation and assurance cycles across deployed systems.
Controls remain not-tested until evidence supports an assessment. Health scores degrade for ineffective controls, stale evidence and unresolved exceptions.
Evidence can expire. Verification status, due dates and validity windows keep assurance from becoming a one-time report.
Operational metrics can be classified as client-measured, CRG-measured, independent external or provider-reported.
Exceptions carry severity, ownership, expiry and remediation rather than disappearing into informal issue lists.