01
Approved implementation plan
The approved plan scheduled production deployment for September 27 and described the expected automated review behavior.
CURRENT ≠ HISTORICAL ≠ CORRECTIVE ≠ FUTURE
The evidence has a tense. So does the conclusion.
These are fictional teaching records. The laboratory does not decide PCI DSS compliance, replace assessor judgment, or determine a compliance-accepting entity's response.
W/ OPERATIONS DESK / ASSESSMENT TIME LAB
Put every fact in its proper tense.
Practice classifying dated control facts before deciding what the assessment can support at a named cut-off.
- W/Current
What is implemented and observable at the cut-off?
- W/∞Historical
What occurred across the required operating period?
- W/✓Corrective
What failure was repaired, and when did the repair become true?
- W/…Future
What remains promised, scheduled, or dependent on later evidence?
ASSESSMENT CUT-OFF2026-09-30T17:00:00-07:00
OPERATING PERIOD2026-07-01 through 2026-09-30
CLAIM UNDER TEST
The fictional automated privileged-access review control was implemented and operating throughout the complete assessment period.
02
Production deployment record
The deployment record identifies the production job, approved change, release version, and successful completion state.
03
First scheduled execution
One scheduled run produced a review population, accountable decision record, and no execution error.
04
Cut-off configuration observation
Inspection at the cut-off found the production schedule enabled for the complete named system population.
05
July and August evidence gap
No execution record exists for July or August because the automated control had not yet been deployed.
06
Promised operating runway
The owner expects a complete quarter of recurring evidence to exist by December 31.
0 of 6 facts classified.
Run it as a team drill.
- Read only the claim, cut-off, and assessment period.
- Classify each dated fact independently as Current, Historical, Corrective, or Future.
- Write the narrowest conclusion the classified record can support.
- Reveal the model, compare boundaries, and name the unsupported remainder.
- Record one exact event that must reopen the conclusion.