SFS 1 / SF C

Back to SFS 1

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are administrator accounts required to use multiple verification methods (such as password plus security token) for login throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Existence of documented policy requiring multiple verification methods for all administrator logins

Assessment criterion and evidence

Actor: Administrator accounts. Scope: All privileged administrative access points. Evidence period: During the entire review period. Required evidence: Authentication policy documentation; Authorization records. Negative criterion: Absence of documented requirement for multiple verification methods for administrator access. Missing evidence: No available policy documentation regarding administrator login verification methods

View the JSON record (opens in a new tab).

Assessment result: unset.