Implement step of the NIST RMF: for each selected control, how it is implemented, who is responsible, where the evidence is and its status. Only what you describe is recorded as implemented.
Implementation descriptions — One row per entry, e.g. AC-2; accounts created from HR requests, reviewed quarterly; IT manager; ticket export Q3; Implemented
Roles and owners — Who is responsible for which area. Owners in the deliverable are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the deliverable.
Author — Shown as the author of the deliverable; never filled in by the AI.
