SFS 5 / SF 0

Back to SFS 5

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has the organization implemented network controls to ensure that only authorized communication is permitted between systems during the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Network controls are documented and enforced to permit only authorized communication paths between systems.

Assessment criterion and evidence

Actor: the organization. Scope: network infrastructure, including firewalls and security groups. Evidence period: the review period. Required evidence: Configuration files showing permitted communication paths; Audit logs verifying enforcement. Negative criterion: Network controls are absent, overly permissive, or not enforced, allowing unauthorized communication.. Missing evidence: No documentation or audit evidence of network controls is provided.

View the JSON record (opens in a new tab).

Assessment result: unset.