SFS 1 / SF 6

Back to SFS 1

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are administrator account and master key access authorizations documented with named responsible parties throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented authorization records specify named personnel permitted to use each privileged secret

Assessment criterion and evidence

Actor: Organization administrators. Scope: Privileged account access authorizations. Evidence period: During the review period. Required evidence: Written authorization records showing named personnel for each privileged account/secret. Negative criterion: No documentation identifies authorized personnel for privileged accounts or secrets. Missing evidence: Pending verification of authorization records

View the JSON record (opens in a new tab).

Assessment result: unset.