ssat-review

Check a system against its SSAT (System Security Acceptance Test) checklist before go-live or a major release — decide which items apply, collect evidence for every line from the code, CI and deployed settings, and propose a status for each item (Closed, RA for risk acceptance, or NA). Use when preparing an SSAT, a security acceptance checklist or a go-live security review. Read-only; proposes, never accepts risk.