SFS 1 / SF D

Back to SFS 1

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Is the recovery of master encryption keys designed to require collaboration from multiple authorized individuals throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Recovery procedure mandates collaboration from multiple authorized individuals

Assessment criterion and evidence

Actor: Organization. Scope: Master encryption key recovery processes. Evidence period: Review period. Required evidence: Documented recovery procedure specifying multi-person authorization requirements; Evidence of implementation (e.g., access control configurations or system settings). Negative criterion: Recovery can be executed by a single individual without additional authorization. Missing evidence: No documented recovery procedure or evidence of multi-person control mechanism

View the JSON record (opens in a new tab).

Assessment result: unset.