diff --git a/INSTALL_THE_APP/README.md b/INSTALL_THE_APP/README.md
index 5003b68..693b435 100644
--- a/INSTALL_THE_APP/README.md
+++ b/INSTALL_THE_APP/README.md
@@ -10,6 +10,12 @@ This is one of three ways to use the CSF Profile Assessment Database:
 | `GET_THE_SPREADSHEETS/` | You just want CSV/Excel artifacts to work in spreadsheets. |
 | `GET_THE_NOTION_TEMPLATE/` | You prefer to assess inside Notion. Quick-start bundle and import guide. |
 
+## Install from your browser (no toolchain)
+
+The web app is a Progressive Web App: open a **production copy** in Chrome or Edge — a hosted deployment, or a local build served with `npm run build` then `npx serve -s build` — and click the **install icon** in the address bar (or menu → *Install CSF Profile Assessment*). You get a standalone app window, a launcher/dock icon, and offline support: after the first visit the app opens and runs with no connection. (The `npm start` dev server deliberately skips the offline worker so hot reload never fights a cache.) Your data already lives entirely in your browser's local storage, so nothing about installing changes where data goes.
+
+This is the fastest path on machines where you can't install Node or Rust — nothing to build, nothing to run as admin.
+
 ## Quick start
 
 See the main [README — Installation and Setup](../README.md#installation-and-setup) for the full walkthrough. Short version:
diff --git a/package.json b/package.json
index 5f05f2d..88e7bc0 100644
--- a/package.json
+++ b/package.json
@@ -27,7 +27,7 @@
   },
   "scripts": {
     "start": "react-scripts start",
-    "build": "react-scripts build",
+    "build": "react-scripts build && node scripts/stamp-service-worker.mjs",
     "test": "react-scripts test",
     "eject": "react-scripts eject",
     "tauri": "tauri",
diff --git a/public/apple-touch-icon.png b/public/apple-touch-icon.png
new file mode 100644
index 0000000..6edf9ed
Binary files /dev/null and b/public/apple-touch-icon.png differ
diff --git a/public/index.html b/public/index.html
index 40ce914..af6e4d8 100644
--- a/public/index.html
+++ b/public/index.html
@@ -9,7 +9,7 @@
       name="description"
       content="Free open-source NIST CSF 2.0 maturity assessment tool — score all 106 subcategories, track quarterly progress, visualize gaps on a dashboard radar, and export audit-ready CSV workpapers."
     />
-    <link rel="apple-touch-icon" href="%PUBLIC_URL%/SC_Logo.png" />
+    <link rel="apple-touch-icon" href="%PUBLIC_URL%/apple-touch-icon.png" />
     <!--
       manifest.json provides metadata used when your web app is installed on a
       user's mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/
diff --git a/public/logo192.png b/public/logo192.png
index fc44b0a..6927785 100644
Binary files a/public/logo192.png and b/public/logo192.png differ
diff --git a/public/logo512.png b/public/logo512.png
index a4e47a6..7e0af3a 100644
Binary files a/public/logo512.png and b/public/logo512.png differ
diff --git a/public/manifest.json b/public/manifest.json
index 721ec33..30c7d97 100644
--- a/public/manifest.json
+++ b/public/manifest.json
@@ -1,25 +1,31 @@
 {
-  "short_name": "CSF Profile Assessment",
+  "id": "./",
   "name": "CSF Profile Assessment",
+  "short_name": "CSF Profile",
+  "description": "Free open-source NIST CSF 2.0 maturity assessment tool — score all 106 subcategories, track quarterly progress, visualize gaps on a dashboard radar, and export audit-ready CSV workpapers.",
+  "start_url": ".",
+  "scope": ".",
+  "display": "standalone",
+  "theme_color": "#000000",
+  "background_color": "#000000",
   "icons": [
     {
-      "src": "SC_Logo.png",
-      "sizes": "64x64 32x32 24x24 16x16",
-      "type": "image/png"
+      "src": "logo192.png",
+      "type": "image/png",
+      "sizes": "192x192",
+      "purpose": "any"
     },
     {
-      "src": "SC_Logo.png",
+      "src": "logo512.png",
       "type": "image/png",
-      "sizes": "192x192"
+      "sizes": "512x512",
+      "purpose": "any"
     },
     {
-      "src": "SC_Logo.png",
+      "src": "maskable-512.png",
       "type": "image/png",
-      "sizes": "512x512"
+      "sizes": "512x512",
+      "purpose": "maskable"
     }
-  ],
-  "start_url": ".",
-  "display": "standalone",
-  "theme_color": "#000000",
-  "background_color": "#ffffff"
+  ]
 }
diff --git a/public/maskable-512.png b/public/maskable-512.png
new file mode 100644
index 0000000..bda6b34
Binary files /dev/null and b/public/maskable-512.png differ
diff --git a/public/service-worker.js b/public/service-worker.js
new file mode 100644
index 0000000..4ba6896
--- /dev/null
+++ b/public/service-worker.js
@@ -0,0 +1,167 @@
+/* eslint-disable no-restricted-globals */
+/*
+ * Offline-first service worker for the CSF Profile Assessment PWA.
+ *
+ * Strategy, by request class (same-origin GET only — everything else,
+ * including POSTs and /api/, passes through untouched):
+ *  - Navigations: network-first with the cached app shell as offline
+ *    fallback, so a deploy is picked up on the next online visit and the
+ *    app still opens with no connection.
+ *  - /static/ build output: cache-first. These files are content-hashed,
+ *    so a cached copy is never stale.
+ *  - Everything else (the CSV datasets, icons, manifest): stale-while-
+ *    revalidate. Served from cache for speed and offline, refreshed in
+ *    the background so installed users keep receiving dataset updates.
+ *
+ * The build script appends a fingerprint comment to this file so its
+ * bytes change whenever the bundle changes; the browser's byte-diff
+ * update check then re-installs the worker and re-runs the precache.
+ */
+
+const CACHE_NAME = 'csf-profile-v1';
+const APP_SHELL = [
+  '.',
+  'index.html',
+  'manifest.json',
+  'logo192.png',
+  'logo512.png',
+  'tblProfile_Demo.csv',
+  'Confluence-Requirements.csv',
+  'scoring_legend.csv'
+];
+
+/*
+ * Chrome refuses to serve a redirected response for a navigation, and
+ * static hosts commonly redirect /index.html -> /. Re-wrap before caching
+ * so the offline shell is always servable.
+ */
+async function withoutRedirect(response) {
+  if (!response.redirected) return response;
+  const body = await response.blob();
+  return new Response(body, {
+    status: response.status,
+    statusText: response.statusText,
+    headers: response.headers
+  });
+}
+
+function isHtml(response) {
+  return (response.headers.get('content-type') || '').includes('text/html');
+}
+
+self.addEventListener('install', (event) => {
+  event.waitUntil(
+    (async () => {
+      const cache = await caches.open(CACHE_NAME);
+      await Promise.all(
+        APP_SHELL.map(async (url) => {
+          const response = await fetch(url);
+          if (!response.ok) throw new Error(`precache failed: ${url} ${response.status}`);
+          await cache.put(url, await withoutRedirect(response));
+        })
+      );
+      // Precache the content-hashed build assets listed in the CRA
+      // asset manifest; tolerate its absence (e.g. `npm start` dev server).
+      try {
+        const response = await fetch('asset-manifest.json');
+        if (response.ok) {
+          const manifest = await response.json();
+          const files = Object.values(manifest.files || {}).filter((path) =>
+            /\.(js|css)$/.test(path)
+          );
+          await cache.addAll(files);
+        }
+      } catch (err) {
+        // Offline or missing manifest — runtime caching will fill the gap.
+      }
+      await self.skipWaiting();
+    })()
+  );
+});
+
+self.addEventListener('activate', (event) => {
+  event.waitUntil(
+    (async () => {
+      const names = await caches.keys();
+      await Promise.all(
+        names.filter((name) => name !== CACHE_NAME).map((name) => caches.delete(name))
+      );
+      await self.clients.claim();
+    })()
+  );
+});
+
+self.addEventListener('fetch', (event) => {
+  const { request } = event;
+  if (request.method !== 'GET') return;
+
+  const url = new URL(request.url);
+  if (url.origin !== self.location.origin) return;
+  // Live server state (AI backend status) must never be cached or intercepted.
+  if (url.pathname.startsWith('/api/')) return;
+
+  if (request.mode === 'navigate') {
+    event.respondWith(
+      (async () => {
+        try {
+          const response = await fetch(request);
+          if (response.ok) {
+            const copy = response.clone();
+            event.waitUntil(
+              (async () => {
+                const cache = await caches.open(CACHE_NAME);
+                await cache.put('index.html', await withoutRedirect(copy));
+              })().catch(() => {})
+            );
+          }
+          return response;
+        } catch (err) {
+          const cached = await caches.match('index.html');
+          if (cached) return cached;
+          throw err;
+        }
+      })()
+    );
+    return;
+  }
+
+  if (url.pathname.includes('/static/')) {
+    event.respondWith(
+      (async () => {
+        const cached = await caches.match(request);
+        if (cached) return cached;
+        const response = await fetch(request);
+        if (response.ok && response.type === 'basic') {
+          const copy = response.clone();
+          event.waitUntil(
+            caches.open(CACHE_NAME).then((cache) => cache.put(request, copy)).catch(() => {})
+          );
+        }
+        return response;
+      })()
+    );
+    return;
+  }
+
+  event.respondWith(
+    (async () => {
+      const cached = await caches.match(request);
+      const refresh = (async () => {
+        const response = await fetch(request);
+        // An SPA-fallback HTML page for a non-navigation URL is junk
+        // (e.g. a 200-with-index.html for a missing path) — never cache it.
+        if (response.ok && response.type === 'basic' && !isHtml(response)) {
+          const copy = response.clone();
+          const cache = await caches.open(CACHE_NAME);
+          await cache.put(request, await withoutRedirect(copy));
+        }
+        return response;
+      })();
+      if (cached) {
+        event.waitUntil(refresh.catch(() => {}));
+        return cached;
+      }
+      return refresh;
+    })()
+  );
+});
diff --git a/scripts/stamp-service-worker.mjs b/scripts/stamp-service-worker.mjs
new file mode 100644
index 0000000..28314e5
--- /dev/null
+++ b/scripts/stamp-service-worker.mjs
@@ -0,0 +1,14 @@
+// Appends a build fingerprint to build/service-worker.js so its bytes change
+// whenever the bundle changes. The browser updates a service worker only when
+// the file's bytes differ, so without this stamp a deploy would never re-run
+// the precache step. Idempotent: re-running replaces the previous stamp.
+import { createHash } from 'node:crypto';
+import { readFileSync, writeFileSync } from 'node:fs';
+
+const manifest = readFileSync('build/asset-manifest.json');
+const stamp = createHash('sha256').update(manifest).digest('hex').slice(0, 16);
+
+const swPath = 'build/service-worker.js';
+const source = readFileSync(swPath, 'utf8').replace(/\n\/\/ build [0-9a-f]+\n$/, '\n');
+writeFileSync(swPath, `${source}// build ${stamp}\n`);
+console.log(`service-worker.js stamped with build ${stamp}`);
diff --git a/src/index.js b/src/index.js
index d563c0f..3216bb9 100644
--- a/src/index.js
+++ b/src/index.js
@@ -3,6 +3,7 @@ import ReactDOM from 'react-dom/client';
 import './index.css';
 import App from './App';
 import reportWebVitals from './reportWebVitals';
+import { register as registerServiceWorker } from './serviceWorkerRegistration';
 
 const root = ReactDOM.createRoot(document.getElementById('root'));
 root.render(
@@ -15,3 +16,6 @@ root.render(
 // to log results (for example: reportWebVitals(console.log))
 // or send to an analytics endpoint. Learn more: https://bit.ly/CRA-vitals
 reportWebVitals();
+
+// Offline support + browser installability (production builds only).
+registerServiceWorker();
diff --git a/src/pages/Dashboard.js b/src/pages/Dashboard.js
index 0c93153..b4c8098 100644
--- a/src/pages/Dashboard.js
+++ b/src/pages/Dashboard.js
@@ -22,9 +22,11 @@ import {
   ReferenceLine,
   LineChart,
   Line,
+  LabelList,
 } from 'recharts';
 import useAssessmentsStore from '../stores/assessmentsStore';
 import useControlsStore from '../stores/controlsStore';
+import useUserStore from '../stores/userStore';
 import useRequirementsStore from '../stores/requirementsStore';
 import useUIStore from '../stores/uiStore';
 import useFindingsStore from '../stores/findingsStore';
@@ -98,6 +100,8 @@ const STATUS_ORDER = ['Not Started', 'In Progress', 'Submitted', 'Complete', 'Bl
 const Dashboard = () => {
   const assessments = useAssessmentsStore((state) => state.assessments);
   const getControl = useControlsStore((state) => state.getControl);
+  const controls = useControlsStore((state) => state.controls);
+  const users = useUserStore((state) => state.users);
   const requirements = useRequirementsStore((state) => state.requirements);
   const darkMode = useUIStore((state) => state.darkMode);
   const findings = useFindingsStore((state) => state.findings);
@@ -603,6 +607,70 @@ const Dashboard = () => {
   }, [selectedAssessment, dashboardData, selectedQuarter, artifacts, findings]);
   // ── End KPI Cards ──────────────────────────────────────────────────────────
 
+  // ── Portfolio Overview ─────────────────────────────────────────────────────
+  // Workspace-wide rollups across ALL assessments and ALL controls. These are
+  // deliberately independent of selectedAssessmentId / selectedQuarter — they
+  // answer "how is the whole program doing", not "how is this eval doing".
+
+  // Assessments by status (assessment.status: Not Started | In Progress | Complete)
+  const portfolioStatusData = useMemo(() => {
+    const counts = assessments.reduce((acc, a) => {
+      const status = a.status || 'Not Started';
+      acc[status] = (acc[status] || 0) + 1;
+      return acc;
+    }, {});
+
+    return Object.entries(counts)
+      .map(([name, value]) => ({
+        name,
+        value,
+        color: STATUS_COLORS[name] || '#9ca3af',
+      }))
+      .sort((a, b) => {
+        const indexA = STATUS_ORDER.indexOf(a.name);
+        const indexB = STATUS_ORDER.indexOf(b.name);
+        if (indexA === -1 && indexB === -1) return a.name.localeCompare(b.name);
+        if (indexA === -1) return 1;
+        if (indexB === -1) return -1;
+        return indexA - indexB;
+      });
+  }, [assessments]);
+
+  const portfolioStatusTotal = useMemo(() => {
+    return portfolioStatusData.reduce((sum, item) => sum + item.value, 0);
+  }, [portfolioStatusData]);
+
+  // Controls per owner, sorted highest count first. Null/missing ownerId
+  // aggregates into "Unassigned"; a deleted user's ID degrades to a stable
+  // fallback label rather than crashing the lookup.
+  const controlOwnerChartData = useMemo(() => {
+    const nameById = new Map(users.map(u => [u.id, u.name]));
+    const counts = new Map();
+    controls.forEach(c => {
+      const key = c.ownerId || null;
+      counts.set(key, (counts.get(key) || 0) + 1);
+    });
+
+    return Array.from(counts.entries())
+      .map(([ownerId, count]) => ({
+        name: ownerId === null
+          ? 'Unassigned'
+          : (nameById.get(ownerId) || `User ${ownerId}`),
+        count,
+        unassigned: ownerId === null,
+      }))
+      .sort((a, b) => b.count - a.count || a.name.localeCompare(b.name));
+  }, [controls, users]);
+
+  const unassignedControlsCount = useMemo(() => {
+    return controls.filter(c => !c.ownerId).length;
+  }, [controls]);
+
+  const unassignedAssessmentsCount = useMemo(() => {
+    return assessments.filter(a => !a.users || a.users.length === 0).length;
+  }, [assessments]);
+  // ── End Portfolio Overview ─────────────────────────────────────────────────
+
   if (assessments.length === 0) {
     return (
       <div className="p-4 bg-white dark:bg-gray-900 min-h-full flex items-center justify-center">
@@ -1219,6 +1287,170 @@ const Dashboard = () => {
         </>
       )}
 
+      {/* Portfolio Overview — workspace-wide, independent of the selected assessment */}
+      <div className="mt-6">
+        <h2 className="text-2xl font-bold text-gray-900 dark:text-gray-100 mb-4">Portfolio Overview</h2>
+
+        {/* Assignment coverage KPI cards */}
+        <div className="grid grid-cols-2 lg:grid-cols-4 gap-4 mb-6">
+          <KPICard
+            title="Assessments"
+            value={assessments.length}
+            subtitle="Total evaluations in workspace"
+            darkMode={darkMode}
+          />
+          <KPICard
+            title="Unassigned Assessments"
+            value={unassignedAssessmentsCount}
+            subtitle={`${unassignedAssessmentsCount} of ${assessments.length} with no users assigned`}
+            darkMode={darkMode}
+          />
+          <KPICard
+            title="Controls"
+            value={controls.length}
+            subtitle="Total controls in library"
+            darkMode={darkMode}
+          />
+          <KPICard
+            title="Unassigned Controls"
+            value={unassignedControlsCount}
+            subtitle={`${unassignedControlsCount} of ${controls.length} with no control owner`}
+            darkMode={darkMode}
+          />
+        </div>
+
+        {/* Assessments by Status Pie Chart */}
+        <div className="card mb-6">
+          <div className="flex items-center justify-between mb-4">
+            <h2 className="text-lg font-semibold">Assessment Status — All Evaluations</h2>
+          </div>
+
+          <div className="flex gap-8 items-center">
+            {/* Pie Chart */}
+            <div className="flex-shrink-0">
+              {portfolioStatusData.length > 0 ? (
+                <ResponsiveContainer width={520} height={360}>
+                  <PieChart margin={{ left: 100, right: 80 }}>
+                    <Pie
+                      data={portfolioStatusData}
+                      cx="50%"
+                      cy="50%"
+                      labelLine={{ stroke: chartColors.textMuted }}
+                      label={({ name, percent, x, y }) => (
+                        <text x={x} y={y} fill={chartColors.text} textAnchor="middle" dominantBaseline="middle" fontSize={12}>
+                          {`${name} (${(percent * 100).toFixed(0)}%)`}
+                        </text>
+                      )}
+                      outerRadius={100}
+                      fill="#8884d8"
+                      dataKey="value"
+                    >
+                      {portfolioStatusData.map((entry, index) => (
+                        <Cell key={`portfolio-cell-${index}`} fill={entry.color} />
+                      ))}
+                    </Pie>
+                    <Tooltip
+                      formatter={(value, name) => [`${value} assessments (${((value / portfolioStatusTotal) * 100).toFixed(1)}%)`, name]}
+                      contentStyle={{ backgroundColor: chartColors.background, border: `1px solid ${chartColors.border}`, borderRadius: 8, color: chartColors.text }}
+                    />
+                  </PieChart>
+                </ResponsiveContainer>
+              ) : (
+                <div className="flex items-center justify-center" style={{ width: 520, height: 360 }}>
+                  <span className="text-gray-500">No assessments yet.</span>
+                </div>
+              )}
+            </div>
+
+            {/* Per-evaluation status table */}
+            <div className="flex-1">
+              <h3 className="text-base font-semibold text-gray-700 mb-3">Status by Evaluation</h3>
+              <table className="border-collapse w-full max-w-md">
+                <thead>
+                  <tr className="bg-gray-100">
+                    <th className="border border-gray-300 px-3 py-2 text-left text-sm font-semibold text-gray-700">Assessment</th>
+                    <th className="border border-gray-300 px-3 py-2 text-left text-sm font-semibold text-gray-700">Status</th>
+                  </tr>
+                </thead>
+                <tbody>
+                  {assessments.map((a, index) => {
+                    const status = a.status || 'Not Started';
+                    return (
+                      <tr key={a.id} className={index % 2 === 0 ? 'bg-white' : 'bg-gray-50'}>
+                        <td className="border border-gray-300 px-3 py-2 text-sm font-medium text-gray-900">{a.name}</td>
+                        <td className="border border-gray-300 px-3 py-2 text-sm">
+                          <div className="flex items-center gap-2">
+                            <div
+                              className="w-3 h-3 rounded-full"
+                              style={{ backgroundColor: STATUS_COLORS[status] || '#9ca3af' }}
+                            />
+                            {status}
+                          </div>
+                        </td>
+                      </tr>
+                    );
+                  })}
+                  {assessments.length > 0 && (
+                    <tr className="bg-blue-100 font-semibold">
+                      <td className="border border-gray-300 px-3 py-2 text-sm">Total</td>
+                      <td className="border border-gray-300 px-3 py-2 text-sm">{portfolioStatusTotal} assessments</td>
+                    </tr>
+                  )}
+                </tbody>
+              </table>
+            </div>
+          </div>
+        </div>
+
+        {/* Controls by Owner Bar Chart */}
+        <div className="card mb-6">
+          <div className="flex items-center justify-between mb-4">
+            <h2 className="text-lg font-semibold">Controls by Owner</h2>
+          </div>
+
+          {controlOwnerChartData.length > 0 ? (
+            <ResponsiveContainer width="100%" height={Math.max(220, controlOwnerChartData.length * 40 + 60)}>
+              <ComposedChart
+                layout="vertical"
+                data={controlOwnerChartData}
+                margin={{ top: 10, right: 60, left: 10, bottom: 10 }}
+              >
+                <CartesianGrid strokeDasharray="3 3" horizontal={false} stroke={chartColors.grid} />
+                <XAxis
+                  type="number"
+                  allowDecimals={false}
+                  tick={{ fontSize: 11, fill: chartColors.text }}
+                  tickLine={false}
+                  axisLine={false}
+                />
+                <YAxis
+                  type="category"
+                  dataKey="name"
+                  width={160}
+                  tick={{ fontSize: 12, fill: chartColors.text }}
+                  tickLine={false}
+                />
+                <Tooltip
+                  formatter={(value) => [`${value} control${value === 1 ? '' : 's'}`, 'Controls']}
+                  cursor={{ fill: 'rgba(148, 163, 184, 0.1)' }}
+                  contentStyle={{ backgroundColor: chartColors.background, border: `1px solid ${chartColors.border}`, borderRadius: 6, fontSize: 12, color: chartColors.text }}
+                />
+                <Bar dataKey="count" name="Controls" radius={[0, 4, 4, 0]} barSize={22}>
+                  {controlOwnerChartData.map((entry, index) => (
+                    <Cell key={`owner-cell-${index}`} fill={entry.unassigned ? '#9ca3af' : '#60a5fa'} />
+                  ))}
+                  <LabelList dataKey="count" position="right" style={{ fill: chartColors.text, fontSize: 12 }} />
+                </Bar>
+              </ComposedChart>
+            </ResponsiveContainer>
+          ) : (
+            <div className="flex items-center justify-center h-48 text-gray-500 text-sm">
+              No controls in the library yet.
+            </div>
+          )}
+        </div>
+      </div>
+
       {/* Audit Report Metadata Modal */}
       {showAuditModal && (
         <div style={{ position: 'fixed', top: 0, left: 0, right: 0, bottom: 0, backgroundColor: 'rgba(0,0,0,0.5)', display: 'flex', alignItems: 'center', justifyContent: 'center', zIndex: 9999 }}>
diff --git a/src/pwa.test.js b/src/pwa.test.js
new file mode 100644
index 0000000..8c03ad4
--- /dev/null
+++ b/src/pwa.test.js
@@ -0,0 +1,329 @@
+import fs from 'fs';
+import path from 'path';
+import vm from 'vm';
+import { register, unregister } from './serviceWorkerRegistration';
+
+const PUBLIC_DIR = path.resolve(__dirname, '..', 'public');
+
+const readPublic = (name) => fs.readFileSync(path.join(PUBLIC_DIR, name), 'utf8');
+
+/** Width/height straight from the PNG IHDR chunk — no image library needed. */
+function pngDimensions(name) {
+  const buf = fs.readFileSync(path.join(PUBLIC_DIR, name));
+  return { width: buf.readUInt32BE(16), height: buf.readUInt32BE(20) };
+}
+
+describe('web app manifest', () => {
+  const manifest = JSON.parse(readPublic('manifest.json'));
+
+  test('declares the installability fields Chrome requires', () => {
+    expect(manifest.name).toBe('CSF Profile Assessment');
+    expect(manifest.short_name).toBeTruthy();
+    expect(manifest.start_url).toBeTruthy();
+    expect(manifest.display).toBe('standalone');
+    expect(manifest.theme_color).toBe('#000000');
+    // The app shell is black; a white launch background would flash.
+    expect(manifest.background_color).toBe('#000000');
+  });
+
+  test('id preserves the pre-manifest identity so existing installs update in place', () => {
+    // An origin-relative id equal to start_url matches the implicit identity
+    // the app had before an id was declared; anything else orphans installs.
+    expect(manifest.id).toBe('./');
+  });
+
+  test('declares 192px and 512px icons plus a maskable variant', () => {
+    const bySize = Object.fromEntries(manifest.icons.map((i) => [i.sizes, i]));
+    expect(bySize['192x192']).toBeDefined();
+    expect(bySize['512x512']).toBeDefined();
+    expect(manifest.icons.some((i) => i.purpose === 'maskable')).toBe(true);
+  });
+
+  test('every declared icon exists and its pixel size matches its declaration', () => {
+    for (const icon of manifest.icons) {
+      const [w, h] = icon.sizes.split('x').map(Number);
+      const actual = pngDimensions(icon.src);
+      expect({ src: icon.src, ...actual }).toEqual({ src: icon.src, width: w, height: h });
+    }
+  });
+});
+
+describe('index.html install surface', () => {
+  const html = readPublic('index.html');
+
+  test('links the manifest and theme color', () => {
+    expect(html).toContain('rel="manifest"');
+    expect(html).toContain('name="theme-color"');
+  });
+
+  test('apple-touch-icon points at a real file', () => {
+    const match = html.match(/rel="apple-touch-icon" href="%PUBLIC_URL%\/([^"]+)"/);
+    expect(match).not.toBeNull();
+    expect(fs.existsSync(path.join(PUBLIC_DIR, match[1]))).toBe(true);
+  });
+});
+
+/*
+ * Evaluates public/service-worker.js in a sandbox and drives its real
+ * install/activate/fetch handlers with synthetic events, so the tests pin
+ * behavior — request classes, cache strategy, write gating — not source text.
+ */
+const ORIGIN = 'https://csf.example';
+
+class FakeResponse {
+  constructor(body, init = {}) {
+    this.body = body;
+    this.status = init.status ?? 200;
+    this.statusText = init.statusText ?? '';
+    this.headers = init.headers || { get: () => null };
+    this.ok = this.status >= 200 && this.status < 300;
+    this.redirected = false;
+    this.type = 'basic';
+  }
+}
+
+function makeResponse({ status = 200, contentType = 'text/plain', redirected = false, type = 'basic' } = {}) {
+  return {
+    status,
+    ok: status >= 200 && status < 300,
+    redirected,
+    type,
+    headers: { get: (name) => (name.toLowerCase() === 'content-type' ? contentType : null) },
+    clone() {
+      return this;
+    },
+    blob: async () => 'body-bytes',
+    json: async () => ({}),
+  };
+}
+
+function loadServiceWorker() {
+  const listeners = {};
+  const store = new Map();
+  const keyOf = (req) => (typeof req === 'string' ? req : req.url);
+  const cache = {
+    put: jest.fn(async (req, res) => {
+      store.set(keyOf(req), res);
+    }),
+    addAll: jest.fn(async (urls) => {
+      urls.forEach((u) => store.set(u, makeResponse()));
+    }),
+  };
+  const caches = {
+    open: jest.fn(async () => cache),
+    match: jest.fn(async (req) => store.get(keyOf(req))),
+    keys: jest.fn(async () => []),
+    delete: jest.fn(async () => true),
+  };
+  const fetchMock = jest.fn(async () => makeResponse());
+  const self = {
+    location: new URL(`${ORIGIN}/`),
+    addEventListener: (type, fn) => {
+      listeners[type] = fn;
+    },
+    skipWaiting: jest.fn(async () => {}),
+    clients: { claim: jest.fn(async () => {}) },
+  };
+  vm.runInNewContext(readPublic('service-worker.js'), {
+    self,
+    caches,
+    fetch: fetchMock,
+    URL,
+    Response: FakeResponse,
+  });
+  return { listeners, cache, caches, store, fetch: fetchMock, self };
+}
+
+function dispatchFetch(listeners, request) {
+  let responded = null;
+  const waits = [];
+  listeners.fetch({
+    request,
+    respondWith: (p) => {
+      responded = p;
+    },
+    waitUntil: (p) => {
+      waits.push(p);
+    },
+  });
+  return { responded, settle: () => Promise.allSettled(waits) };
+}
+
+const req = (url, extra = {}) => ({ method: 'GET', mode: 'no-cors', url: `${ORIGIN}${url}`, ...extra });
+
+describe('service worker behavior', () => {
+  test('install precaches the app shell including the CSV datasets, plus hashed assets', async () => {
+    const sw = loadServiceWorker();
+    sw.fetch.mockImplementation(async (target) => {
+      if (target === 'asset-manifest.json') {
+        return { ...makeResponse(), json: async () => ({ files: { 'main.js': '/static/js/main.abc.js', 'index.html': '/index.html' } }) };
+      }
+      return makeResponse();
+    });
+    let installed;
+    sw.listeners.install({ waitUntil: (p) => (installed = p) });
+    await installed;
+    const putKeys = sw.cache.put.mock.calls.map(([k]) => k);
+    for (const entry of ['index.html', 'manifest.json', 'tblProfile_Demo.csv', 'Confluence-Requirements.csv', 'scoring_legend.csv']) {
+      expect(putKeys).toContain(entry);
+    }
+    expect(sw.cache.addAll).toHaveBeenCalledWith(['/static/js/main.abc.js']);
+    expect(sw.self.skipWaiting).toHaveBeenCalled();
+  });
+
+  test('a redirected shell response is re-wrapped before caching so offline navigations can serve it', async () => {
+    const sw = loadServiceWorker();
+    sw.fetch.mockImplementation(async (target) =>
+      target === 'index.html' ? makeResponse({ redirected: true, contentType: 'text/html' }) : makeResponse()
+    );
+    let installed;
+    sw.listeners.install({ waitUntil: (p) => (installed = p) });
+    await installed;
+    const stored = sw.store.get('index.html');
+    expect(stored).toBeInstanceOf(FakeResponse);
+    expect(stored.redirected).toBe(false);
+  });
+
+  test('activate deletes caches from other versions only', async () => {
+    const sw = loadServiceWorker();
+    sw.caches.keys.mockResolvedValue(['csf-profile-v0', 'csf-profile-v1']);
+    let activated;
+    sw.listeners.activate({ waitUntil: (p) => (activated = p) });
+    await activated;
+    expect(sw.caches.delete).toHaveBeenCalledWith('csf-profile-v0');
+    expect(sw.caches.delete).not.toHaveBeenCalledWith('csf-profile-v1');
+  });
+
+  test('never intercepts POSTs, cross-origin requests, or /api/', () => {
+    const sw = loadServiceWorker();
+    expect(dispatchFetch(sw.listeners, req('/save', { method: 'POST' })).responded).toBeNull();
+    expect(dispatchFetch(sw.listeners, { method: 'GET', mode: 'cors', url: 'https://other.example/x' }).responded).toBeNull();
+    expect(dispatchFetch(sw.listeners, req('/api/ai/status')).responded).toBeNull();
+    expect(sw.fetch).not.toHaveBeenCalled();
+  });
+
+  test('navigations go network-first and only ok responses become the cached shell', async () => {
+    const sw = loadServiceWorker();
+    const fresh = makeResponse({ contentType: 'text/html' });
+    sw.fetch.mockResolvedValue(fresh);
+    const { responded, settle } = dispatchFetch(sw.listeners, req('/', { mode: 'navigate' }));
+    expect(await responded).toBe(fresh);
+    await settle();
+    expect(sw.store.get('index.html')).toBe(fresh);
+
+    // A 500 during a deploy blip must never poison the offline shell.
+    sw.cache.put.mockClear();
+    sw.fetch.mockResolvedValue(makeResponse({ status: 500, contentType: 'text/html' }));
+    const second = dispatchFetch(sw.listeners, req('/', { mode: 'navigate' }));
+    expect((await second.responded).status).toBe(500);
+    await second.settle();
+    expect(sw.cache.put).not.toHaveBeenCalled();
+  });
+
+  test('offline navigation falls back to the cached shell', async () => {
+    const sw = loadServiceWorker();
+    const shell = makeResponse({ contentType: 'text/html' });
+    sw.store.set('index.html', shell);
+    sw.fetch.mockRejectedValue(new TypeError('offline'));
+    const { responded } = dispatchFetch(sw.listeners, req('/', { mode: 'navigate' }));
+    expect(await responded).toBe(shell);
+  });
+
+  test('hashed /static/ assets are cache-first: a cached copy never triggers a fetch', async () => {
+    const sw = loadServiceWorker();
+    const cachedJs = makeResponse({ contentType: 'application/javascript' });
+    sw.store.set(`${ORIGIN}/static/js/main.abc.js`, cachedJs);
+    const { responded } = dispatchFetch(sw.listeners, req('/static/js/main.abc.js'));
+    expect(await responded).toBe(cachedJs);
+    expect(sw.fetch).not.toHaveBeenCalled();
+  });
+
+  test('datasets are stale-while-revalidate: cached copy served, fresh copy fetched and stored', async () => {
+    const sw = loadServiceWorker();
+    const stale = makeResponse({ contentType: 'text/csv' });
+    const fresh = makeResponse({ contentType: 'text/csv' });
+    sw.store.set(`${ORIGIN}/tblProfile_Demo.csv`, stale);
+    sw.fetch.mockResolvedValue(fresh);
+    const { responded, settle } = dispatchFetch(sw.listeners, req('/tblProfile_Demo.csv'));
+    expect(await responded).toBe(stale);
+    await settle();
+    expect(sw.fetch).toHaveBeenCalledTimes(1);
+    expect(sw.store.get(`${ORIGIN}/tblProfile_Demo.csv`)).toBe(fresh);
+  });
+
+  test('SPA-fallback HTML for a non-navigation URL is never cached', async () => {
+    const sw = loadServiceWorker();
+    sw.fetch.mockResolvedValue(makeResponse({ contentType: 'text/html; charset=utf-8' }));
+    const { responded, settle } = dispatchFetch(sw.listeners, req('/no-such-file.csv'));
+    await responded;
+    await settle();
+    expect(sw.cache.put).not.toHaveBeenCalled();
+  });
+});
+
+describe('service worker registration', () => {
+  const setEnv = (key, value) => {
+    if (value === undefined) delete process.env[key];
+    else process.env[key] = value;
+  };
+  let savedNodeEnv;
+  let savedPublicUrl;
+
+  beforeEach(() => {
+    savedNodeEnv = process.env.NODE_ENV;
+    savedPublicUrl = process.env.PUBLIC_URL;
+  });
+
+  afterEach(() => {
+    setEnv('NODE_ENV', savedNodeEnv);
+    setEnv('PUBLIC_URL', savedPublicUrl);
+    delete window.navigator.serviceWorker;
+  });
+
+  test('is a no-op outside production builds', () => {
+    const addEventListener = jest.spyOn(window, 'addEventListener');
+    register(); // NODE_ENV is 'test' here
+    expect(addEventListener).not.toHaveBeenCalledWith('load', expect.any(Function));
+    addEventListener.mockRestore();
+  });
+
+  test('in production, skips environments without service worker support instead of throwing', () => {
+    setEnv('NODE_ENV', 'production');
+    setEnv('PUBLIC_URL', '');
+    const addEventListener = jest.spyOn(window, 'addEventListener');
+    expect(() => register()).not.toThrow(); // jsdom has no navigator.serviceWorker
+    expect(addEventListener).not.toHaveBeenCalledWith('load', expect.any(Function));
+    addEventListener.mockRestore();
+  });
+
+  test('in production, skips a cross-origin PUBLIC_URL that could not control this page', () => {
+    setEnv('NODE_ENV', 'production');
+    setEnv('PUBLIC_URL', 'https://cdn.example.com/app');
+    Object.defineProperty(window.navigator, 'serviceWorker', {
+      value: { register: jest.fn() },
+      configurable: true,
+    });
+    const addEventListener = jest.spyOn(window, 'addEventListener');
+    register();
+    expect(addEventListener).not.toHaveBeenCalledWith('load', expect.any(Function));
+    expect(window.navigator.serviceWorker.register).not.toHaveBeenCalled();
+    addEventListener.mockRestore();
+  });
+
+  test('unregister survives environments without service worker support', () => {
+    expect(() => unregister()).not.toThrow();
+  });
+
+  test('in production with support, registers the worker on window load', () => {
+    setEnv('NODE_ENV', 'production');
+    setEnv('PUBLIC_URL', '');
+    const registerMock = jest.fn(() => Promise.resolve());
+    Object.defineProperty(window.navigator, 'serviceWorker', {
+      value: { register: registerMock },
+      configurable: true,
+    });
+    register();
+    window.dispatchEvent(new Event('load'));
+    expect(registerMock).toHaveBeenCalledWith('/service-worker.js');
+  });
+});
diff --git a/src/serviceWorkerRegistration.js b/src/serviceWorkerRegistration.js
new file mode 100644
index 0000000..e7f6dbd
--- /dev/null
+++ b/src/serviceWorkerRegistration.js
@@ -0,0 +1,32 @@
+/*
+ * Registers the offline service worker in production builds only.
+ *
+ * Dev servers (`npm start`) skip registration so hot reload never fights a
+ * cache, and environments without service worker support (older browsers,
+ * the Tauri desktop webview) are feature-checked and fail silently — the
+ * app runs exactly as before, just without offline install support.
+ */
+
+export function register() {
+  if (process.env.NODE_ENV !== 'production') return;
+  if (typeof navigator === 'undefined' || !('serviceWorker' in navigator)) return;
+
+  const publicUrl = new URL(process.env.PUBLIC_URL, window.location.href);
+  // A CDN-hosted PUBLIC_URL would be cross-origin and cannot control this
+  // page; skip registration rather than register a dead worker.
+  if (publicUrl.origin !== window.location.origin) return;
+
+  window.addEventListener('load', () => {
+    const swUrl = `${process.env.PUBLIC_URL}/service-worker.js`;
+    navigator.serviceWorker.register(swUrl).catch(() => {
+      // Registration is a progressive enhancement; never surface a failure.
+    });
+  });
+}
+
+export function unregister() {
+  if (typeof navigator === 'undefined' || !('serviceWorker' in navigator)) return;
+  navigator.serviceWorker.ready
+    .then((registration) => registration.unregister())
+    .catch(() => {});
+}
diff --git a/src/stores/comprehensiveAssessmentData.js b/src/stores/comprehensiveAssessmentData.js
index d9b496b..252ba92 100644
--- a/src/stores/comprehensiveAssessmentData.js
+++ b/src/stores/comprehensiveAssessmentData.js
@@ -151,9 +151,9 @@ export const COMPREHENSIVE_ARTIFACTS = [
   {
     "id": 1009,
     "artifactId": "AR-110",
-    "name": "Incident Response Playbook (Excerpt)",
-    "description": "Catalog evidence: PROC-incident-response-playbook.md",
-    "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Procedures/PROC-incident-response-playbook.md",
+    "name": "Evidence Preservation Guide (Excerpt)",
+    "description": "Catalog evidence: PROC-evidence-preservation-guide.md",
+    "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Procedures/PROC-evidence-preservation-guide.md",
     "complianceRequirement": null,
     "controlId": null,
     "linkedSubcategoryIds": [],
@@ -167,9 +167,9 @@ export const COMPREHENSIVE_ARTIFACTS = [
   {
     "id": 1010,
     "artifactId": "AR-111",
-    "name": "Patch Management Procedure",
-    "description": "Catalog evidence: PROC-patch-management.md",
-    "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Procedures/PROC-patch-management.md",
+    "name": "Incident Response Playbook (Excerpt)",
+    "description": "Catalog evidence: PROC-incident-response-playbook.md",
+    "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Procedures/PROC-incident-response-playbook.md",
     "complianceRequirement": null,
     "controlId": null,
     "linkedSubcategoryIds": [],
@@ -183,9 +183,9 @@ export const COMPREHENSIVE_ARTIFACTS = [
   {
     "id": 1011,
     "artifactId": "AR-112",
-    "name": "Hardware Inventory Sampling Walkthrough",
-    "description": "Catalog evidence: PROC-sampling-walkthrough.md",
-    "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Procedures/PROC-sampling-walkthrough.md",
+    "name": "Patch Management Procedure",
+    "description": "Catalog evidence: PROC-patch-management.md",
+    "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Procedures/PROC-patch-management.md",
     "complianceRequirement": null,
     "controlId": null,
     "linkedSubcategoryIds": [],
@@ -199,6 +199,22 @@ export const COMPREHENSIVE_ARTIFACTS = [
   {
     "id": 1012,
     "artifactId": "AR-113",
+    "name": "Hardware Inventory Sampling Walkthrough",
+    "description": "Catalog evidence: PROC-sampling-walkthrough.md",
+    "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Procedures/PROC-sampling-walkthrough.md",
+    "complianceRequirement": null,
+    "controlId": null,
+    "linkedSubcategoryIds": [],
+    "linkedEvaluationIds": [],
+    "type": "Procedure",
+    "createdDate": "2026-04-30T00:00:00.000Z",
+    "lastModified": "2026-04-30T00:00:00.000Z",
+    "jiraKey": "AR-113",
+    "status": "ACTIVE"
+  },
+  {
+    "id": 1013,
+    "artifactId": "AR-114",
     "name": "Q4 2025 Access Recertification Report",
     "description": "Catalog evidence: RPT-access-certification-q4.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Reports/RPT-access-certification-q4.md",
@@ -209,12 +225,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Report",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-113",
+    "jiraKey": "AR-114",
     "status": "ACTIVE"
   },
   {
-    "id": 1013,
-    "artifactId": "AR-114",
+    "id": 1014,
+    "artifactId": "AR-115",
     "name": "AWS Tag Compliance Report",
     "description": "Catalog evidence: RPT-aws-tag-compliance.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Reports/RPT-aws-tag-compliance.md",
@@ -225,12 +241,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Report",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-114",
+    "jiraKey": "AR-115",
     "status": "ACTIVE"
   },
   {
-    "id": 1014,
-    "artifactId": "AR-115",
+    "id": 1015,
+    "artifactId": "AR-116",
     "name": "Quarterly Backup Restore Test Report",
     "description": "Catalog evidence: RPT-backup-restore-test.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Reports/RPT-backup-restore-test.md",
@@ -241,12 +257,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Report",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-115",
+    "jiraKey": "AR-116",
     "status": "ACTIVE"
   },
   {
-    "id": 1015,
-    "artifactId": "AR-116",
+    "id": 1016,
+    "artifactId": "AR-117",
     "name": "Network Discovery Scan Results",
     "description": "Catalog evidence: RPT-nmap-scan-results.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Reports/RPT-nmap-scan-results.md",
@@ -257,12 +273,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Report",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-116",
+    "jiraKey": "AR-117",
     "status": "ACTIVE"
   },
   {
-    "id": 1016,
-    "artifactId": "AR-117",
+    "id": 1017,
+    "artifactId": "AR-118",
     "name": "Q1 2026 Phishing Simulation Report",
     "description": "Catalog evidence: RPT-phishing-simulation-q1.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Reports/RPT-phishing-simulation-q1.md",
@@ -273,12 +289,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Report",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-117",
+    "jiraKey": "AR-118",
     "status": "ACTIVE"
   },
   {
-    "id": 1017,
-    "artifactId": "AR-118",
+    "id": 1018,
+    "artifactId": "AR-119",
     "name": "Weekly Vulnerability Scan Summary",
     "description": "Catalog evidence: RPT-vulnerability-scan-summary.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Reports/RPT-vulnerability-scan-summary.md",
@@ -289,12 +305,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Report",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-118",
+    "jiraKey": "AR-119",
     "status": "ACTIVE"
   },
   {
-    "id": 1018,
-    "artifactId": "AR-119",
+    "id": 1019,
+    "artifactId": "AR-120",
     "name": "Alma Security Hardware Inventory",
     "description": "Catalog evidence: INV-hardware-inventory.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Inventories/INV-hardware-inventory.md",
@@ -305,12 +321,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Inventory",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-119",
+    "jiraKey": "AR-120",
     "status": "ACTIVE"
   },
   {
-    "id": 1019,
-    "artifactId": "AR-120",
+    "id": 1020,
+    "artifactId": "AR-121",
     "name": "Service Account Inventory",
     "description": "Catalog evidence: INV-service-accounts.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Inventories/INV-service-accounts.md",
@@ -321,12 +337,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Inventory",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-120",
+    "jiraKey": "AR-121",
     "status": "ACTIVE"
   },
   {
-    "id": 1020,
-    "artifactId": "AR-121",
+    "id": 1021,
+    "artifactId": "AR-122",
     "name": "Authorized Software Inventory",
     "description": "Catalog evidence: INV-software-inventory.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Inventories/INV-software-inventory.md",
@@ -337,12 +353,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Inventory",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-121",
+    "jiraKey": "AR-122",
     "status": "ACTIVE"
   },
   {
-    "id": 1021,
-    "artifactId": "AR-122",
+    "id": 1022,
+    "artifactId": "AR-123",
     "name": "SOC Incident Ticket",
     "description": "Catalog evidence: TKT-SOC-1001-phishing.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Tickets/TKT-SOC-1001-phishing.md",
@@ -353,12 +369,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Ticket",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-122",
+    "jiraKey": "AR-123",
     "status": "ACTIVE"
   },
   {
-    "id": 1022,
-    "artifactId": "AR-123",
+    "id": 1023,
+    "artifactId": "AR-124",
     "name": "SOC Incident Ticket",
     "description": "Catalog evidence: TKT-SOC-1004.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Tickets/TKT-SOC-1004.md",
@@ -369,12 +385,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Ticket",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-123",
+    "jiraKey": "AR-124",
     "status": "ACTIVE"
   },
   {
-    "id": 1023,
-    "artifactId": "AR-124",
+    "id": 1024,
+    "artifactId": "AR-125",
     "name": "SOC Incident Ticket",
     "description": "Catalog evidence: TKT-SOC-1005.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Tickets/TKT-SOC-1005.md",
@@ -385,12 +401,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Ticket",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-124",
+    "jiraKey": "AR-125",
     "status": "ACTIVE"
   },
   {
-    "id": 1024,
-    "artifactId": "AR-125",
+    "id": 1025,
+    "artifactId": "AR-126",
     "name": "GV.RM — Risk Management Strategy: Assessment Artifacts",
     "description": "Catalog evidence: EVD-GV.RM-02-assessment-artifacts.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Evidence/EVD-GV.RM-02-assessment-artifacts.md",
@@ -401,12 +417,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Evidence",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-125",
+    "jiraKey": "AR-126",
     "status": "ACTIVE"
   },
   {
-    "id": 1025,
-    "artifactId": "AR-126",
+    "id": 1026,
+    "artifactId": "AR-127",
     "name": "PR.IP Assessment Artifacts",
     "description": "Catalog evidence: EVD-PR.IP-assessment-artifacts.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Evidence/EVD-PR.IP-assessment-artifacts.md",
@@ -417,12 +433,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Evidence",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-126",
+    "jiraKey": "AR-127",
     "status": "ACTIVE"
   },
   {
-    "id": 1026,
-    "artifactId": "AR-127",
+    "id": 1027,
+    "artifactId": "AR-128",
     "name": "Alma Security Business Case",
     "description": "Catalog evidence: EVD-alma-business-case.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Evidence/EVD-alma-business-case.md",
@@ -433,12 +449,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Evidence",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-127",
+    "jiraKey": "AR-128",
     "status": "ACTIVE"
   },
   {
-    "id": 1027,
-    "artifactId": "AR-128",
+    "id": 1028,
+    "artifactId": "AR-129",
     "name": "AWS Config Compliance Snapshot",
     "description": "Catalog evidence: EVD-aws-config-compliance.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Evidence/EVD-aws-config-compliance.md",
@@ -449,12 +465,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Evidence",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-128",
+    "jiraKey": "AR-129",
     "status": "ACTIVE"
   },
   {
-    "id": 1028,
-    "artifactId": "AR-129",
+    "id": 1029,
+    "artifactId": "AR-130",
     "name": "�-k_�&D��_�\u0016T�s��R��&�l�A���nY�w\u0004�5?�J�I\u0010\u000e�T;P���8N��d�tz��^l9�0nm�z�d�5��\u000bb�c�'�hW�qDh�6�6$��GQK-VH�5Q��>l*{\u0017<SF+w�/V\u0007��]�V���-3������O��wn#�9\u0003\u001c8:&'\t��\bP^�R�k��T��H*hA���#ȫ�Ÿ\u00133}?��\u0001o\u000f�����B\u0012\r�Ҳ{1u���m��V�P�\u0010C�4�\u000b\r��\u0019V\u0000�\u0010��ޓ��}#:$�X�D�<e����\u0014k0\u0011�@\u001a߄���c����-�5�ox��v�������\u0018\"�;\u001a��}8h)��h�+\u001f\u0003�6�\u0011��\u001f��X�\u0002]o\u0017�t�\u001b��*��=�zl���D��{J\u001b��\u000bMW4`\b���]�ܩ+\u001a�ʖI\u0007�\u0010�t�\u0019Ow�¥^Dr7�\u00024zK��։tX�Q�\u001b�[�q���\u0011T^�R4Y��-ȁ)X!�1�R�\u0011l�-�H]NG\u0003�\u0001�qe��T���&��E�~��W�c�U�\t6��\u0004h�몧�眂c�����TB�җ�!�/�mL{w������!�\u001e�����C<1�N唕��M\u0011�NI��|l��+�I'f\u0011�ao�k��\u001fRm+i�/9�6���#�0��\u0007HsfX��VK.�I��\u0001p&FU���8�'2�\u0017�Կ\u0000}���8:L3�M���J]�T�ޖ5� ]\u0018+e�~<h  ���@&\u001bz^E�n\u0002��D\u0000��2]\t�",
     "description": "Catalog evidence: EVD-csf-assessment-workbook.xlsx",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Evidence/EVD-csf-assessment-workbook.xlsx",
@@ -465,12 +481,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Evidence",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-129",
+    "jiraKey": "AR-130",
     "status": "ACTIVE"
   },
   {
-    "id": 1029,
-    "artifactId": "AR-130",
+    "id": 1030,
+    "artifactId": "AR-131",
     "name": "�-k_�&D��_�\u0016T�s��R��&�l�A���nY�w\u0004�5?�J�I\u0010\u000e�T;P���8N��d�tz��^l9�0nm�z�d�5��\u000bb�c�'�hW�qDh�6�6$��GQK-VH�5Q��>l*{\u0017<SF+w�/V\u0007��]�V���-3������O��wn#�9\u0003\u001c8:&'\t��\bP^�R�k��T��H*hA���#ȫ�Ÿ\u00133}?��\u0001o\u000f�����B\u0012\r�Ҳ{1u���m��V�P�\u0010C�4�\u000b\r��\u0019V\u0000�\u0010��ޓ��}#:$�X�D�<e����\u0014k0\u0011�@\u001a߄���c����-�5�ox��v�������\u0018\"�;\u001a��}8h)��h�+\u001f\u0003�6�\u0011��\u001f��X�\u0002]o\u0017�t�\u001b��*��=�zl���D��{J\u001b��\u000bMW4`\b���]�ܩ+\u001a�ʖI\u0007�\u0010�t�\u0019Ow�¥^Dr7�\u00024zK��։tX�Q�\u001b�[�q���\u0011T^�R4Y��-ȁ)X!�1�R�\u0011l�-�H]NG\u0003�\u0001�qe��T���&��E�~��W�c�U�\t6��\u0004h�몧�眂c�����TB�җ�!�/�mL{w������!�\u001e�����C<1�N唕��M\u0011�NI��|l��+�I'f\u0011�ao�k��\u001fRm+i�/9�6���#�0��\u0007HsfX��VK.�I��\u0001p&FU���8�'2�\u0017�Կ\u0000}���8:L3�M���J]�T�ޖ5� ]\u0018+e�~<h  ���@&\u001bz^E�n\u0002��D\u0000��2]\t�",
     "description": "Catalog evidence: EVD-phish-campaign-2025-05-26.xlsx",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Evidence/EVD-phish-campaign-2025-05-26.xlsx",
@@ -481,12 +497,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Evidence",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-130",
+    "jiraKey": "AR-131",
     "status": "ACTIVE"
   },
   {
-    "id": 1030,
-    "artifactId": "AR-131",
+    "id": 1031,
+    "artifactId": "AR-132",
     "name": "Security Awareness Program — Alma Security",
     "description": "Catalog evidence: EVD-security-awareness-program.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Evidence/EVD-security-awareness-program.md",
@@ -497,12 +513,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Evidence",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-131",
+    "jiraKey": "AR-132",
     "status": "ACTIVE"
   },
   {
-    "id": 1031,
-    "artifactId": "AR-132",
+    "id": 1032,
+    "artifactId": "AR-133",
     "name": "SentinelOne Application Control Configuration Evidence",
     "description": "Catalog evidence: EVD-sentinelone-app-control.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Evidence/EVD-sentinelone-app-control.md",
@@ -513,12 +529,12 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Evidence",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-132",
+    "jiraKey": "AR-133",
     "status": "ACTIVE"
   },
   {
-    "id": 1032,
-    "artifactId": "AR-133",
+    "id": 1033,
+    "artifactId": "AR-134",
     "name": "Q1 2026 Security Awareness Training Completion Evidence",
     "description": "Catalog evidence: EVD-training-completion-q1.md",
     "link": "https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Evidence/EVD-training-completion-q1.md",
@@ -529,7 +545,7 @@ export const COMPREHENSIVE_ARTIFACTS = [
     "type": "Evidence",
     "createdDate": "2026-04-30T00:00:00.000Z",
     "lastModified": "2026-04-30T00:00:00.000Z",
-    "jiraKey": "AR-133",
+    "jiraKey": "AR-134",
     "status": "ACTIVE"
   }
 ];
@@ -649,7 +665,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "DE.AE-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -717,7 +733,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "DE.AE-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -785,7 +801,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "DE.AE-04",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -853,7 +869,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "DE.AE-06",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -921,7 +937,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "DE.AE-07",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -990,7 +1006,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "DE.AE-08",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1058,7 +1074,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "DE.CM-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1126,7 +1142,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "DE.CM-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1193,7 +1209,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "DE.CM-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1262,7 +1278,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "DE.CM-06",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1330,7 +1346,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "DE.CM-09",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1399,7 +1415,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.OC-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1464,7 +1480,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.OC-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1530,7 +1546,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.OC-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1595,7 +1611,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.OC-04",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1660,7 +1676,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.OC-05",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1726,7 +1742,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.OV-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1791,7 +1807,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.OV-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1856,7 +1872,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.PO-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1920,7 +1936,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.PO-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -1984,7 +2000,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.RM-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2048,7 +2064,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.RM-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2112,7 +2128,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.RM-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2174,7 +2190,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.RM-04",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2239,7 +2255,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.RM-05",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2303,7 +2319,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.RM-06",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2367,7 +2383,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.RM-07",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2431,7 +2447,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.RR-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2495,7 +2511,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.RR-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2559,7 +2575,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.RR-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2623,7 +2639,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.RR-04",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2688,7 +2704,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.SC-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2752,7 +2768,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.SC-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2816,7 +2832,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.SC-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2881,7 +2897,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.SC-04",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -2943,7 +2959,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.SC-05",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3007,7 +3023,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.SC-06",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3071,7 +3087,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.SC-07",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3135,7 +3151,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.SC-08",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3199,7 +3215,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.SC-09",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3264,7 +3280,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "GV.SC-10",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3329,7 +3345,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.AM-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3396,7 +3412,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.AM-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3459,7 +3475,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.AM-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3522,7 +3538,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.AM-04",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3585,7 +3601,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.AM-05",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3648,7 +3664,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.AM-07",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3711,7 +3727,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.AM-08",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3774,7 +3790,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.IM-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3837,7 +3853,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.IM-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3900,7 +3916,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.IM-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -3963,7 +3979,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.IM-04",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4026,7 +4042,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.RA-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4089,7 +4105,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.RA-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4152,7 +4168,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.RA-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4215,7 +4231,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.RA-04",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4278,7 +4294,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.RA-05",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4341,7 +4357,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.RA-06",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4404,7 +4420,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.RA-07",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4467,7 +4483,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.RA-08",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4530,7 +4546,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.RA-09",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4593,7 +4609,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "ID.RA-10",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4656,7 +4672,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.AA-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4725,7 +4741,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.AA-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4793,7 +4809,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.AA-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4863,7 +4879,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.AA-04",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -4933,7 +4949,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.AA-05",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5001,7 +5017,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.AA-06",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5071,7 +5087,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.AT-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5139,7 +5155,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.AT-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5209,7 +5225,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.DS-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5280,7 +5296,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.DS-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5351,7 +5367,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.DS-10",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5422,7 +5438,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.DS-11",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5495,7 +5511,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.IR-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5565,7 +5581,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.IR-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5635,7 +5651,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.IR-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5705,7 +5721,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.IR-04",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5778,7 +5794,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.PS-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5847,7 +5863,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.PS-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5918,7 +5934,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.PS-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -5989,7 +6005,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.PS-04",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -6060,7 +6076,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.PS-05",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -6131,7 +6147,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "PR.PS-06",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -6205,7 +6221,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RC.CO-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -6273,7 +6289,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RC.CO-04",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -6341,7 +6357,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RC.RP-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -6409,7 +6425,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RC.RP-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -6477,7 +6493,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RC.RP-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -6545,7 +6561,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RC.RP-04",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -6613,7 +6629,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RC.RP-05",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -6681,7 +6697,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RC.RP-06",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -6748,7 +6764,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RS.AN-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -6812,11 +6828,11 @@ export const COMPREHENSIVE_OBSERVATIONS = {
   },
   "RS.AN-06 Ex1": {
     "auditorId": 2,
-    "testProcedures": "# RS.AN-06: Investigation Action Recording Test Procedures\n\n**CSF Subcategory:** RS.AN-06 - Actions performed during an investigation are recorded, and the records' integrity and provenance are preserved\n\n---\n\n## Test Procedures\n\n1. **Review investigation documentation requirements**\n   - Obtain incident response policy sections governing investigation record-keeping\n   - Verify requirements for individual responder action logging during incidents\n   - Confirm the incident lead role and responsibilities for documentation oversight are defined\n   - Check that evidence chain-of-custody procedures are documented\n\n2. **Examine investigation records for completeness**\n   - Pull 3-5 recent incident tickets from ServiceNow (TKT-SOC series)\n   - Verify each ticket contains timestamped action logs from individual responders\n   - Confirm the incident lead documented the incident narrative with supporting evidence\n   - Check that all investigation steps are traceable and attributed to specific personnel\n\n3. **Validate record integrity and preservation controls**\n   - Review ServiceNow audit logging configuration for SOC ticket modifications\n   - Verify incident records cannot be altered without audit trail\n   - Confirm evidence storage locations have access controls and integrity verification\n   - Check retention periods for investigation records against policy requirements\n\n4. **Test provenance tracking for collected evidence**\n   - Select a recent incident and trace evidence from collection through analysis\n   - Verify evidence items are cataloged with source, collector, timestamp, and hash values\n   - Confirm digital evidence handling follows documented forensic procedures\n   - Check that evidence is stored in tamper-evident or write-once storage\n\n---\n\n## Evidence Requests\n\n- [ ] Incident response policy (investigation documentation section)\n- [ ] 3-5 ServiceNow SOC tickets with investigation action logs\n- [ ] ServiceNow audit log configuration for incident tickets\n- [ ] Evidence chain-of-custody procedures\n- [ ] Evidence storage access control configuration\n- [ ] Incident record retention policy\n- [ ] Sample evidence catalog from a recent incident\n\n---\n\n## Notes\n\nThis test procedure validates that investigation actions are systematically recorded with integrity and provenance controls. Mature organizations maintain detailed, tamper-evident investigation logs attributed to individual responders, with the incident lead responsible for comprehensive documentation. The integrity of these records is critical for post-incident reviews, legal proceedings, and regulatory compliance. ServiceNow ticket audit trails provide a baseline, but dedicated evidence management may be needed for complex incidents.",
+    "testProcedures": "# RS.AN-06: Investigation Action Recording Test Procedures\n\n**CSF Subcategory:** RS.AN-06 - Actions performed during an investigation are recorded, and the records' integrity and provenance are preserved\n\n---\n\n## Test Procedures\n\n1. **Review investigation documentation requirements**\n   - Obtain incident response policy sections governing investigation record-keeping\n   - Verify requirements for individual responder action logging during incidents\n   - Confirm the incident lead role and responsibilities for documentation oversight are defined\n   - Check that evidence chain-of-custody procedures are documented\n\n2. **Examine investigation records for completeness**\n   - Pull 3-5 recent incident tickets from ServiceNow (TKT-SOC series)\n   - Verify each ticket contains timestamped action logs from individual responders\n   - Confirm the incident lead documented the incident narrative with supporting evidence\n   - Check that all investigation steps are traceable and attributed to specific personnel\n\n3. **Validate record integrity and preservation controls**\n   - Review ServiceNow audit logging configuration for SOC ticket modifications\n   - Verify incident records cannot be altered without audit trail\n   - Confirm evidence storage locations have access controls and integrity verification\n   - Check retention periods for investigation records against policy requirements\n\n4. **Test provenance tracking for collected evidence**\n   - Select a recent incident and trace evidence from collection through analysis\n   - Verify evidence items are cataloged with source, collector, timestamp, and hash values\n   - Confirm digital evidence handling follows documented forensic procedures\n   - Check that evidence is stored in tamper-evident or write-once storage\n\n---\n\n## Evidence Requests\n\n- [ ] Incident response policy (investigation documentation section)\n- [ ] 3-5 ServiceNow SOC tickets with investigation action logs\n- [ ] ServiceNow audit log configuration for incident tickets\n- [ ] Evidence chain-of-custody procedures\n- [ ] Evidence storage access control configuration\n- [ ] Incident record retention policy\n- [ ] Sample evidence catalog from a recent incident\n- [ ] [Evidence Preservation Guide](https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Procedures/PROC-evidence-preservation-guide.md) (ALMA-SOP-2025-010b)\n\n---\n\n## Notes\n\nThis test procedure validates that investigation actions are systematically recorded with integrity and provenance controls. Mature organizations maintain detailed, tamper-evident investigation logs attributed to individual responders, with the incident lead responsible for comprehensive documentation. The integrity of these records is critical for post-incident reviews, legal proceedings, and regulatory compliance. ServiceNow ticket audit trails provide a baseline, but dedicated evidence management may be needed for complex incidents.",
     "procedureSource": {
       "bank": "community",
       "bankId": "RS.AN-06",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -6880,11 +6896,11 @@ export const COMPREHENSIVE_OBSERVATIONS = {
   },
   "RS.AN-07 Ex1": {
     "auditorId": 2,
-    "testProcedures": "# RS.AN-07: Incident Data Collection and Integrity Test Procedures\n\n**CSF Subcategory:** RS.AN-07 - Incident data and metadata are collected, and their integrity and provenance are preserved\n\n---\n\n## Test Procedures\n\n1. **Review incident data collection procedures**\n   - Obtain documented procedures for collecting incident data and metadata\n   - Verify procedures specify data types to collect (logs, network captures, disk images, memory dumps)\n   - Confirm procedures address metadata preservation including timestamps, source systems, and collection methods\n   - Check that procedures account for volatile data collection priority and sequencing\n\n2. **Examine data collection tooling and capabilities**\n   - Review SentinelOne endpoint data collection capabilities for incident response\n   - Verify SIEM log aggregation includes all relevant data sources for incident reconstruction\n   - Confirm GuardDuty finding metadata is preserved with original context\n   - Check that network traffic capture capabilities exist for incident analysis\n\n3. **Validate integrity preservation mechanisms**\n   - Verify cryptographic hashing is applied to collected evidence\n   - Confirm write-once or tamper-evident storage is used for incident data\n   - Review access controls on evidence repositories\n   - Check that integrity verification is performed before evidence is used in analysis\n\n4. **Test provenance documentation for collected data**\n   - Select a recent incident and trace data collection chain\n   - Verify each evidence item has documented source, collection time, collector identity, and method\n   - Confirm chain-of-custody records exist for evidence transferred between systems or personnel\n   - Check that automated collection tools log their actions and outputs\n\n---\n\n## Evidence Requests\n\n- [ ] Incident data collection procedures and checklists\n- [ ] SentinelOne incident response data collection configuration\n- [ ] SIEM log source inventory and retention configuration\n- [ ] Evidence hashing and integrity verification procedures\n- [ ] Evidence storage access control lists\n- [ ] Sample chain-of-custody documentation from recent incident\n- [ ] Automated collection tool output logs\n\n---\n\n## Notes\n\nThis test procedure validates that incident data and metadata are collected systematically with integrity and provenance controls. The distinction from RS.AN-06 is that this subcategory focuses on the raw data and metadata collected as evidence, while RS.AN-06 addresses the recording of investigation actions themselves. Mature organizations automate evidence collection where possible, apply cryptographic integrity verification, and maintain detailed provenance records. The quality of collected data directly impacts the effectiveness of root cause analysis under RS.AN-03.",
+    "testProcedures": "# RS.AN-07: Incident Data Collection and Integrity Test Procedures\n\n**CSF Subcategory:** RS.AN-07 - Incident data and metadata are collected, and their integrity and provenance are preserved\n\n---\n\n## Test Procedures\n\n1. **Review incident data collection procedures**\n   - Obtain documented procedures for collecting incident data and metadata\n   - Verify procedures specify data types to collect (logs, network captures, disk images, memory dumps)\n   - Confirm procedures address metadata preservation including timestamps, source systems, and collection methods\n   - Check that procedures account for volatile data collection priority and sequencing\n\n2. **Examine data collection tooling and capabilities**\n   - Review SentinelOne endpoint data collection capabilities for incident response\n   - Verify SIEM log aggregation includes all relevant data sources for incident reconstruction\n   - Confirm GuardDuty finding metadata is preserved with original context\n   - Check that network traffic capture capabilities exist for incident analysis\n\n3. **Validate integrity preservation mechanisms**\n   - Verify cryptographic hashing is applied to collected evidence\n   - Confirm write-once or tamper-evident storage is used for incident data\n   - Review access controls on evidence repositories\n   - Check that integrity verification is performed before evidence is used in analysis\n\n4. **Test provenance documentation for collected data**\n   - Select a recent incident and trace data collection chain\n   - Verify each evidence item has documented source, collection time, collector identity, and method\n   - Confirm chain-of-custody records exist for evidence transferred between systems or personnel\n   - Check that automated collection tools log their actions and outputs\n\n---\n\n## Evidence Requests\n\n- [ ] Incident data collection procedures and checklists\n- [ ] SentinelOne incident response data collection configuration\n- [ ] SIEM log source inventory and retention configuration\n- [ ] Evidence hashing and integrity verification procedures\n- [ ] Evidence storage access control lists\n- [ ] Sample chain-of-custody documentation from recent incident\n- [ ] Automated collection tool output logs\n- [ ] [Evidence Preservation Guide](https://github.com/CPAtoCybersecurity/csf_profile/blob/main/ASSESSMENT_CATALOG/5_Artifacts/Procedures/PROC-evidence-preservation-guide.md) (ALMA-SOP-2025-010b)\n\n---\n\n## Notes\n\nThis test procedure validates that incident data and metadata are collected systematically with integrity and provenance controls. The distinction from RS.AN-06 is that this subcategory focuses on the raw data and metadata collected as evidence, while RS.AN-06 addresses the recording of investigation actions themselves. Mature organizations automate evidence collection where possible, apply cryptographic integrity verification, and maintain detailed provenance records. The quality of collected data directly impacts the effectiveness of root cause analysis under RS.AN-03.",
     "procedureSource": {
       "bank": "community",
       "bankId": "RS.AN-07",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -6952,7 +6968,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RS.AN-08",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -7020,7 +7036,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RS.CO-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -7088,7 +7104,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RS.CO-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -7156,7 +7172,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RS.MA-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -7224,7 +7240,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RS.MA-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -7292,7 +7308,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RS.MA-03",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -7360,7 +7376,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RS.MA-04",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -7428,7 +7444,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RS.MA-05",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -7496,7 +7512,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RS.MI-01",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },
@@ -7564,7 +7580,7 @@ export const COMPREHENSIVE_OBSERVATIONS = {
     "procedureSource": {
       "bank": "community",
       "bankId": "RS.MI-02",
-      "bankVersion": "47e1c68ed81d375c",
+      "bankVersion": "61b4d2be5f1e7ea9",
       "attachedAt": "2026-04-30T00:00:00.000Z",
       "modified": false
     },