Section navigation
Canonical DefinitionsConformance ChecklistRecord Surface Map TemplateCustody Surface Map TemplateConfiguration Exposure MatrixFeedback Routing TableAudit Evidence ChecklistConformance Statement TemplateIndependent Assessor GuidanceConformance Model CrosswalkARCS-to-NIST SP 800-53 CrosswalkVerification and Attestation ProtocolLegal and Discovery FrameworkConduit and Custody ModelIndustry Framework Comparison
Annex D: Custody Surface Map Template
Minimum required fields for a custody surface map per Section 7. This template is informative.
| Field | Description | Required |
|---|---|---|
| Custodian Entity | Provider / tenant / vendor / user / third party | Yes |
| Record Classes Held | Which records this custodian possesses | Yes |
| Possession vs Control | Whether custodian physically holds vs has access rights | Yes |
| Deletion Authority | Whether custodian can delete records | Yes |
| Access Rights | Who within custodian entity can access records | Yes |
| Jurisdiction | Legal jurisdiction governing custody | Yes |
| Fragmentation Note | If custody is shared or split | Yes |
| Preservation Capability | Whether custodian can implement legal hold | Yes |
| Verification Status | Whether custodian behavior has been verified | Yes |