ACR-10.29v1.0

The CAPO SHALL deliver SLA-bound alerting for Assurance Class C systems: Critical-severity complianc

Eval Method

CM+ATCM+AT

Risk Weight

5 / 10

Applicability

L1L2L3

Description#

The CAPO SHALL deliver SLA-bound alerting for Assurance Class C systems: Critical-severity compliance events SHALL generate alerts within 5 minutes of detection; Emergency-severity events SHALL generate alerts within 60 seconds. Failure to meet these SLAs for material events constitutes an Assurance Lapse condition.

Evaluation Method#

CM+ATCM+AT

Evaluation methodology as specified by the assigned method code.

v1.1 Details#

Profile Applicability

A,C

Evaluation Frequency

Continuous

Platform Cert Eligible

No

Framework Crosswalk Refs

ARA Standard v1.1 §5.3; ARAF CAPO SLA Framework

Classification#

Conditional Control

This is a conditional control. Non-compliance with this ACR may result in conditional certification with a mandated remediation period. The Authorized Verification Body will specify the remediation timeline and required evidence for the condition to be cleared. If remediation is not completed within the specified period, the conditional certification will be revoked.