Section navigation
Canonical DefinitionsConformance ChecklistRecord Surface Map TemplateCustody Surface Map TemplateConfiguration Exposure MatrixFeedback Routing TableAudit Evidence ChecklistConformance Statement TemplateIndependent Assessor GuidanceConformance Model CrosswalkARCS-to-NIST SP 800-53 CrosswalkVerification and Attestation ProtocolLegal and Discovery FrameworkConduit and Custody ModelIndustry Framework Comparison
Annex C: Record Surface Map Template
Minimum required fields for a record surface map per Section 7. This template is informative.
| Field | Description | Required |
|---|---|---|
| Surface Location | Provider storage / tenant storage / local device / integration / backup / cache / archive | Yes |
| Record Classes | Which interaction record types exist at this location | Yes |
| Retention Duration | How long records persist at this location | Yes |
| Deletion Trigger | What causes deletion at this location | Yes |
| User Visibility | Whether user can see these records | Yes |
| User Control | Whether user can delete these records | Yes |
| Discovery Exposure | Whether reasonably susceptible to legal discovery | Yes |
| Custodian | Entity with possession, control, or access | Yes |
| Unknown Status | Whether this surface is incompletely documented | Yes |
| Last Updated | Date of last verification | Yes |
Completion notes
Unknown surfaces must be documented as unknown, not omitted. An operator claiming Level 4 conformance must have no undocumented surfaces in the normal operating record set.