SFS 4 / SF 2

Back to SFS 4

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all organization-owned data assets encrypted at rest using approved cryptographic standards across local, network-attached, and cloud storage systems throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented configuration records showing approved encryption standards applied to all data at rest

Assessment criterion and evidence

Actor: Organization. Scope: All organization-owned data assets across storage systems (local, network-attached, cloud). Evidence period: Review period. Required evidence: Technical configuration records for storage systems; Cryptographic standard validation against approved policy; Audit logs confirming continuous encryption coverage. Negative criterion: Evidence of unencrypted sensitive data or non-compliant encryption implementations. Missing evidence: Pending verification due to incomplete configuration logs or audit trails

View the JSON record (opens in a new tab).

Assessment result: unset.