SFS 5 / SF 2

Back to SFS 5

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has the organization verified through documented evidence that firewall and security group rules permit only authorized network connections during the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: documented verification confirming rules permit only authorized connections

Assessment criterion and evidence

Actor: organization. Scope: firewall and security group rules. Evidence period: review period. Required evidence: firewall rule configuration logs; security group audit reports. Negative criterion: evidence shows rules allow unauthorized connections or verification is missing. Missing evidence: pending verification

View the JSON record (opens in a new tab).

Assessment result: unset.