SFS 3 / SF 7

Back to SFS 3

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are trust relationships with federated identity providers periodically reviewed to confirm continued authorization and prevent unauthorized access throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Trust relationships with federated identity providers are periodically reviewed and only authorized entities maintain valid configurations.

Assessment criterion and evidence

Actor: The organization. Scope: Trust relationships with federated identity providers. Evidence period: Throughout the review period. Required evidence: Documented review records showing periodic validation of trust relationships; Current trust configuration listings confirming only authorized entities. Negative criterion: Trust relationships are not reviewed or unauthorized entities have active trust configurations.. Missing evidence: Pending until documented review records and configuration validations are provided.

View the JSON record (opens in a new tab).

Assessment result: unset.