# Criterion question: Edge and Management-Plane Compromise is named for an impact and counted by asset class

- **Artifact ID:** CHQ-CRIT-QUESTION-2026-001
- **Version:** 1.2
- **Status:** REFERRED TO THE Q4 AUDIT
- **Public record:** https://record.cybersecurityhq.com/governance/chq-crit-question-2026-001
- **Machine-record SHA-256:** `6f9c3dbd056f943b80b692722df623dcc0dad11864be8cd53f450df0266a337a`

## Complete structured record

```json
{
  "id": "CHQ-CRIT-QUESTION-2026-001",
  "title": "Criterion question: Edge and Management-Plane Compromise is named for an impact and counted by asset class",
  "class": "AUDIT",
  "version": "1.2",
  "effective": "2026-10-30",
  "published": "2026-11-12",
  "status": "REFERRED TO THE Q4 AUDIT",
  "status_detail": "Opened 30 October 2026 and amended twice the same day: the first version counted four entries where three are supported (CHQ-CORR-2026-020), and the second overstated the basis for one of the three (CHQ-CORR-2026-021). No counted set changed.",
  "rule": "The condition's criterion counts reinforcing entries by asset sub-class and does not mention impact. Three reinforcing entries dated before 30 October 2026 state denial of service as their only impact. Whether the condition counts assets or impacts is put to the Q4 audit.",
  "scope": "SC-2026-002.",
  "authority": "DM ratified 2026-11-12"
}
```