SFS 3 / SF 4

Back to SFS 3

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are service accounts with elevated privileges subject to periodic access reviews to confirm continued necessity throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented evidence confirms regular reviews of elevated service account privileges validating necessity

Assessment criterion and evidence

Actor: Organization management. Scope: Service identities requiring administrative or privileged access levels. Evidence period: Throughout the review period. Required evidence: Access review records for service accounts with elevated privileges. Negative criterion: No evidence that elevated service account privileges undergo scheduled access reviews. Missing evidence: Pending verification of service account review documentation

View the JSON record (opens in a new tab).

Assessment result: unset.