SFS 1 / SF F

Back to SFS 1

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are administrator accounts exclusively assigned to individual personnel without sharing throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented policy and access logs confirm administrator accounts are individually assigned with no sharing

Assessment criterion and evidence

Actor: Organization security management. Scope: All administrator accounts and associated privileges. Evidence period: The review period. Required evidence: Documented policy prohibiting shared administrator accounts; Access logs demonstrating individual login activities. Negative criterion: Evidence of shared administrator accounts or absence of individual assignment controls. Missing evidence: Unavailable policy documentation or access logs for verification

View the JSON record (opens in a new tab).

Assessment result: unset.