SFS 4 / SF D

Back to SFS 4

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are personal data assets stored separately from non-personal data assets across all organizational storage systems throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Verified segregation through system configurations or records

Assessment criterion and evidence

Actor: Organization managing storage systems. Scope: Physical and logical separation of personal versus non-personal data in storage environments. Evidence period: Review period. Required evidence: Documented storage policies specifying separation requirements; System configurations showing isolated storage environments; Network or directory structure evidence of segregation. Negative criterion: Personal data found co-stored with non-personal data without compensating controls. Missing evidence: Pending verification if evidence unavailable

View the JSON record (opens in a new tab).

Assessment result: unset.