SFS 3 / SF E

Back to SFS 3

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are user access permissions to critical systems reviewed and revoked when no longer required for current job responsibilities during the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: permissions revoked within defined timeframe after job responsibility change

Assessment criterion and evidence

Actor: organization. Scope: user access permissions to critical systems. Evidence period: review period. Required evidence: permission review workflow documentation; audit logs showing revocation timestamps. Negative criterion: unnecessary permissions persist beyond requirement period. Missing evidence: pending assessment due to absence of review records

View the JSON record (opens in a new tab).

Assessment result: unset.