SFS 0 / SF 9

Back to SFS 0

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all remote workstation access sessions encrypted and authenticated using approved methods throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Evidence of encrypted sessions with approved authentication methods matching organizational policy

Assessment criterion and evidence

Actor: organization. Scope: all remote workstation access sessions. Evidence period: review period. Required evidence: Documented remote access security policy; Technical configuration records verifying encryption/authentication settings; Audit logs demonstrating session security compliance. Negative criterion: Unencrypted sessions or authentication using unapproved methods observed. Missing evidence: Pending assessment due to unavailable configuration records

View the JSON record (opens in a new tab).

Assessment result: unset.