SFS 5 / SF 1

Back to SFS 5

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has the organization verified through documented evidence that network segmentation controls prevent unauthorized communication between isolated segments during the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented test results or audit reports confirming segmentation controls block unauthorized cross-segment communication as designed

Assessment criterion and evidence

Actor: Organization. Scope: Network segmentation controls including firewalls, security groups, and zero-trust policies enforcing traffic restrictions between defined segments. Evidence period: Review period. Required evidence: Recent test reports demonstrating attempted unauthorized cross-segment traffic was blocked; Configuration audits verifying segmentation rules match documented network architecture. Negative criterion: Documented evidence showing unauthorized communication paths exist between segments, or segmentation controls improperly configured. Missing evidence: Pending assessment when no evidence of segmentation verification testing is provided

View the JSON record (opens in a new tab).

Assessment result: unset.