SFS 5 / SF 3

Back to SFS 5

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has the organization verified through documented evidence that virtual private network (VPN) configurations enforce secure remote access policies and are reviewed periodically during the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: documented evidence of verified secure configurations and periodic reviews

Assessment criterion and evidence

Actor: organization. Scope: virtual private network (VPN) configurations for secure remote access. Evidence period: review period. Required evidence: configuration documentation demonstrating enforcement of secure policies; records of periodic configuration reviews; test results validating remote access security controls. Negative criterion: absence of verified configurations or reviews. Missing evidence: pending until evidence is provided

View the JSON record (opens in a new tab).

Assessment result: unset.