SFS 3 / SF 8

Back to SFS 3

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are new user accounts for critical systems provisioned only after successful verification of identity against approved official credentials throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Verified identity per documented procedure using approved credentials

Assessment criterion and evidence

Actor: Organization responsible for account provisioning. Scope: New user accounts for critical systems requiring authentication. Evidence period: 365 days prior to assessment. Required evidence: Documented identity verification procedure specifying approved credential types; Audit logs showing verification completion for sample new accounts. Negative criterion: Accounts created without identity verification steps. Missing evidence: Pending verification evidence from provisioning records

View the JSON record (opens in a new tab).

Assessment result: unset.