Immutable log
Event history
Rule set
Engine version
ctaf-rules-v1.0 (workbook parity)
Not Met terms
"not", "missing", "no ", "does not"
Partially Met terms
"partial", "some", "in progress"
Risk derives from status; POA&M is required for Not Met and Partially Met. No AI participates in the authoritative determination.
Scope
System of record
- Organization
- Meridian Health Analytics
- System
- Meridian Cloud Data Platform (CSO)
- Framework
- NIST 800-53 Rev5 / FedRAMP Moderate
- FIPS 199
- Moderate
- Authorization
- ATO · 2026-11-30