SFS 3 / SF 2

Back to SFS 3

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are user accounts promptly disabled following employment termination or role change throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Evidence of account disablement within policy timeframe after termination or role change notification

Assessment criterion and evidence

Actor: Organization managing user accounts. Scope: All user accounts accessing critical services. Evidence period: Review period. Required evidence: HR termination/role change notifications with timestamps; System logs showing account disablement timestamps. Negative criterion: Active accounts beyond documented policy timeframe after termination or role change notification. Missing evidence: Pending determination due to unavailable disablement records or termination notices

View the JSON record (opens in a new tab).

Assessment result: unset.