Comodo One Compliance
18 atomic requirements assessed
18 atomic requirements assessed
AI Atomic Compliance Determination
Multi-model AI assessment of how Comodo One satisfies individual compliance requirements — evaluated atom-by-atom across each framework.
5-Model AI Ensemble — AI Proposed
Each requirement was evaluated independently by 5 AI models (GPT-4o-mini, Llama 3.3, DeepSeek V3, Qwen 72B, Gemini Flash). Results represent AI consensus — not a formal audit or legal compliance opinion. Confidence scores are capped by evidence tier; all results are AI-proposed pending human review.
NIST SP 800-53 revision 5
18 requirements evaluated
✓ 18 Meets
| Determination | Type | Req. ID | Statement | Conf. |
|---|---|---|---|---|
| Meets | hybrid | AC-2.d.3 | Specify access authorizations (i.e., privileges) and [Assignment: organization-defined attributes, as required] for each account. | 95% |
| Meets | hybrid | AC-2.i.3 | Authorize access to the system based on [Assignment: organization-defined attributes, as required]. | 95% |
| Meets | hybrid | AC-2.h.1 | Notify account managers and [Assignment: organization-defined personnel or roles] within [Assignment: organization-defined time period] when accounts are no longer required. | 95% |
| Meets | hybrid | AC-2.d.1 | Specify authorized users of the system. | 95% |
| Meets | hybrid | AC-2.i.1 | Authorize access to the system based on a valid access authorization. | 95% |
| Meets | hybrid | AC-2.i.2 | Authorize access to the system based on intended system usage. | 95% |
| Meets | hybrid | AC-2.k | Establish and implement a process for changing shared or group account authenticators (if deployed) when individuals are removed from the group. | 95% |
| Meets | hybrid | AC-2.h.3 | Notify account managers and [Assignment: organization-defined personnel or roles] within [Assignment: organization-defined time period] when system usage or need-to-know changes for an individual. | 95% |
| Meets | process | AC-2.l | Align account management processes with personnel termination and transfer processes. | 95% |
| Meets | hybrid | AC-2.c | Require [Assignment: organization-defined conditions or criteria] for group and role membership. | 95% |
| Meets | hybrid | AC-2.h.2 | Notify account managers and [Assignment: organization-defined personnel or roles] within [Assignment: organization-defined time period] when users are terminated or transferred. | 95% |
| Meets | technical | AC-2.d.2 | Specify group and role membership. | 95% |
| Meets | hybrid | AC-2.j | Review accounts for compliance with account management requirements [Assignment: organization-defined frequency]. | 95% |
| Meets | hybrid | AC-2.g | Monitor the use of accounts. | 95% |
| Meets | hybrid | AC-2.e | Require approvals by [Assignment: organization-defined personnel or roles] for requests to create accounts. | 95% |
| Meets | hybrid | AC-2.f | Create, enable, modify, disable, and remove accounts in accordance with [Assignment: organization-defined policy, procedures, prerequisites, and criteria]. | 95% |
| Meets | process | AC-2.b | Assign account managers. | 95% |
| Meets | process | AC-2.a | Define and document the types of accounts allowed and specifically prohibited for use within the system. | 95% |