SFS 3 / SF F
Status: Question model review passed; solution and completed SF authoring pending.
This is a generated authoring draft. Human approval and operational assessment results have not been supplied.
Question
Are shared user accounts (like departmental or group logins without administrative privileges) reviewed periodically to verify they're still needed and only assigned to appropriate users during the review period?
Plain-language explanation
Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented evidence confirms periodic review of shared account necessity and user assignments
Assessment criterion and evidence
Actor: Organization. Scope: Non-administrative shared user accounts (e.g., departmental/group logins). Evidence period: Throughout the review period. Required evidence: Review schedules and completed review records; Current user assignments for shared accounts. Negative criterion: No reviews conducted or reviews failed to verify necessity/appropriate assignments. Missing evidence: Pending until documented review evidence is provided
View the JSON record (opens in a new tab).
Assessment result: unset.