TLS · appears in SIG, ISO 27001
Are TLS certificates monitored via Certificate Transparency logs for unauthorised issuance?
Every certificate issued for this domain is published in Certificate Transparency logs — including subdomains you may have forgotten. Unknown subdomains in CT are pre-disclosed attack surface (ISO 27001 A.8.16).
How to answer this
Whichever verdict your domain earns, this is the wording to put in the response box. Reviewers mark an answer down for vagueness more often than for a "No", so say which state you are in and what evidences it.
- Yes
- Issued certificates are visible in Certificate Transparency logs (CT-monitoring viable)
- Partial
- CT log entries exist but with anomalies worth review
- No
- No CT log entries were observed for this domain
Controls this evidences
| Framework | Control | Why it maps |
|---|---|---|
| SOC 2 | CC7.2 | CT-log monitoring catches unauthorised certificate issuance. |
| ISO 27001 | A.8.16 | — |
| NIST 800-53 | SI-4 | — |
Domain Posture is not an audit and does not replace an auditor. See methodology v1 for how each verdict is reached.
When a "Yes" stops being true
CT-log visibility lost (monitoring no longer viable for this root).
That is the whole problem with answering a questionnaire from a screenshot: the answer was true the day you took it. A signed evidence pack is dated, and a schedule re-checks it so you find out before your reviewer does.