Live Control State: current, not last quarter's audit
Security posture that updates itself, so the picture reflects what is true now, not what was self-reported at the last assessment cycle.
Four inputs, one current register
Assessments establish the baseline; remediations move controls forward; audited manual overrides capture reality with a receipt; and incidents degrade the affected controls automatically. No stale dashboards, no manual sync.
Incidents treated as systemic control failures
Creating an incident automatically degrades the affected controls via a MITRE ATT&CK → CIS mapping, and root-cause analysis compares the at-incident state to the current state. A breach is treated as a systemic control failure rather than an isolated event: the "informed by real incident data" half of evidence-backed efficacy.
Every change leaves a receipt
Every state change writes an immutable record with source, user, timestamp, and justification, and uploaded evidence carries a tamper-evident SHA-256 hash. The method is inspectable; nothing moves without a receipt.
Frequently asked questions
How is Live Control State different from an annual assessment?
An annual assessment is a point-in-time snapshot that goes stale between cycles. Live Control State is always current (continuously updated from assessments, incidents, remediations, and audited overrides), so posture reflects what is true now.
What happens to controls when an incident is logged?
Creating an incident automatically degrades the affected controls via a MITRE ATT&CK to CIS mapping, and root-cause analysis compares the at-incident state to the current state. Breaches are treated as systemic control failures, not isolated events.
Is every change auditable?
Yes. Every control-state change writes an immutable record with source, user, timestamp, and justification, and evidence uploads carry a tamper-evident SHA-256 hash re-verified on download.
See it on your portfolio
Testify is accepting early customers. Portfolio Directors and Operating Partners get priority access to a guided walkthrough.