SFS 6 / SF 1

Back to SFS 6

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are security event logs protected from unauthorized modification to maintain integrity throughout the review period, with documented evidence of successful verification?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Logs show no unauthorized modifications with regular integrity verification evidence

Assessment criterion and evidence

Actor: Organization. Scope: Security event logs across all critical systems. Evidence period: Review period. Required evidence: Tamper-proof log repository configuration; Regular integrity check results. Negative criterion: Unauthorized changes detected without proper authorization records. Missing evidence: No logs or verification evidence available; status pending

View the JSON record (opens in a new tab).

Assessment result: unset.