SFS 0 / SF 5

Back to SFS 0

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are decryption keys for all organization-owned workstations securely managed and protected throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Decryption keys are stored in secure hardware modules or approved centralized systems with strict access controls

Assessment criterion and evidence

Actor: Organization. Scope: All organization-owned workstations. Evidence period: Specified review period. Required evidence: Documented key management policy; Audit logs showing access controls. Negative criterion: Decryption keys are stored in plaintext, accessible to unauthorized personnel, or lack audit trails. Missing evidence: Pending verification due to absence of documented key management practices or audit evidence

View the JSON record (opens in a new tab).

Assessment result: unset.