Evidence Requirement

ID Code Title Summary Evidence Type Mandatory Due Date Acceptance Criteria System Risk Control
1 ER-001 Annual penetration test of the segmented CMS Independent pen test confirming the segmentation c... report 2026-07-31 No critical findings unremediated. Legacy Case Management System Unsupported platform security exposure Network segmentation and enhanced monitoring