Published 14 October 2026 · Source-linked research prepared with AI assistance. Proposed services require an agreed scope and qualified delivery team.
Record the criterion before the answer
A maturity value is meaningful only against a defined requirement. State what function is needed, under which conditions and how it will be demonstrated. The control descriptions in this release are prompts; an actual assessment needs site-specific acceptance criteria. A generic statement such as “generator available” is not enough to demonstrate critical-load continuity.
Make a finding traceable
- Reference: a document ID, test record or other retrievable evidence location.
- Reviewer: the responsible person whose review is being recorded.
- Method: document review or performance test; self-attestation is retained but not assessed.
- Review and expiry dates: current and appropriate to the profile and operating requirements.
- Contradictions: unresolved evidence conflicts explicitly marked.
- Next action: owner, due date and evidence needed to close the issue.
The workbench stores references and notes, not uploaded evidence files. A valid-looking reference is not automatically authentic. All entered records need an appropriate review and protected evidence workflow before publication.
Performance has a different burden
A power-transfer test must address the required load and configuration. A sensor needs relevant calibration and field comparison. A response drill needs evidence of what actually happened. Test-required controls cannot reach level 4 through a document-only review in the calculation engine. The tool does not choose a universal test interval or operating threshold.
Freshness is part of the result
A review date cannot lie after the assessment date, and expiry cannot precede review. Evidence that expires before the assessment date becomes unknown for scoring. A material equipment change, failed exercise or contradictory finding can require earlier reassessment. Expiry dates must come from the appropriate profile and obligations, not from a convenient score target.
Protect the assessment record
Use fictional or appropriately authorized records in the public workbench. Its Save button stores the draft in the current browser; JSON export is a local download. There is no automatic cloud upload or Exposure Watch synchronization. Shared workstations and downloaded files need the owner’s normal information-handling controls. The Clear button removes the local draft and editor content.
Sources & further reading
- NIST — Community Resilience Planning Guide A Playbook ↗Guide and current planning resources. Recovery targets tied to community functions and supporting infrastructure.
- Gerst Dillard and Loerzel via NIST — Methodological recommendations for content validation of community resilience indicators ↗2025. Research abstract supporting structured expert judgment alongside literature and empirical testing.
- CMS — Core Emergency Preparedness Rule Elements ↗Current guidance page. Four broad preparedness elements; specific provider obligations require current detailed guidance.