SFS 3 / SF A

Back to SFS 3

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are user access permissions for critical systems verified to align with current job roles during each required access review throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented evidence showing access reviews explicitly validated permissions against current job responsibilities

Assessment criterion and evidence

Actor: Organization's access management team. Scope: User permissions for critical systems. Evidence period: The review period. Required evidence: Access review documentation demonstrating role-permission validation. Negative criterion: Review records exist but lack verification of role-permission alignment. Missing evidence: Pending until documented review records are provided

View the JSON record (opens in a new tab).

Assessment result: unset.