SFS 3 / SF D

Back to SFS 3

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are access permissions for external user accounts (such as contractors or partners) periodically reviewed to confirm continued authorization throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: documented evidence of periodic access reviews confirming continued authorization

Assessment criterion and evidence

Actor: organization. Scope: external user accounts including contractors and partners. Evidence period: review period. Required evidence: access review policy specifying frequency; records of completed review meetings/approvals. Negative criterion: absence of required reviews or confirmed unauthorized access. Missing evidence: pending until review documentation is provided

View the JSON record (opens in a new tab).

Assessment result: unset.