SFS 1 / SF 2
Status: Question model review passed; solution and completed SF authoring pending.
This is a generated authoring draft. Human approval and operational assessment results have not been supplied.
Question
Are administrator accounts restricted exclusively to privileged functions without regular user capabilities throughout the review period?
Plain-language explanation
Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Administrative accounts demonstrate no regular user activity capabilities
Assessment criterion and evidence
Actor: organization's system administrators. Scope: privileged account usage across critical systems. Evidence period: entire review period. Required evidence: Privileged account usage validation records; Activity monitoring logs showing separation. Negative criterion: Administrative accounts used for non-privileged tasks observed. Missing evidence: Pending verification if activity monitoring records are unavailable
View the JSON record (opens in a new tab).
Assessment result: unset.