Catalog
SF 4: question draft

SFS 5 / SF 4

Back to SFS 5

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has the organization conducted documented periodic reviews of network access rules to confirm they permit only connections required for current business operations during the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: documented reviews confirming only business-required connections permitted

Assessment criterion and evidence

Actor: organization. Scope: network access rules. Evidence period: review period. Required evidence: documentation of review dates and scope; review findings demonstrating alignment with current business requirements. Negative criterion: no evidence of reviews or reviews showing non-compliant rules. Missing evidence: pending verification

View the JSON record (opens in a new tab).

Assessment result: unset.