SFS 1 / SF 0

Back to SFS 1

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are administrator accounts and master keys rotated at regular intervals according to organizational policy during the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented rotation occurs at defined intervals with verification evidence

Assessment criterion and evidence

Actor: organization. Scope: administrator accounts, privileged credentials, and master encryption keys. Evidence period: review period. Required evidence: Documented rotation schedule and procedure; Audit logs demonstrating completed rotations. Negative criterion: No rotation policy exists or policy violations are demonstrated. Missing evidence: Pending when rotation policy exists but execution evidence is unavailable

View the JSON record (opens in a new tab).

Assessment result: unset.