SFS 1 / SF 9

Back to SFS 1

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are authorizations for administrator accounts and master keys reviewed periodically to confirm continued necessity throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented periodic reviews confirm access remains necessary

Assessment criterion and evidence

Actor: organization. Scope: administrator accounts and master keys. Evidence period: review period. Required evidence: Defined review interval documentation; Recent review logs with approval signatures. Negative criterion: No periodic review process exists or reviews are not performed. Missing evidence: Absence of review schedules or verification records

View the JSON record (opens in a new tab).

Assessment result: unset.