SFS 6 / SF 4

Back to SFS 6

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Does the organization use deception systems such as honeypots within its declared security infrastructure to detect unauthorized access attempts during the review period, with documented evidence confirming their deployment and observed interactions?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: documented evidence confirming deployment of deception systems and observed interactions indicating unauthorized access attempts

Assessment criterion and evidence

Actor: the organization. Scope: declared security infrastructure. Evidence period: the review period. Required evidence: documentation proving deployment of deception systems; logs showing observed unauthorized interactions. Negative criterion: absence of documented evidence demonstrating operational deception systems and their interactions. Missing evidence: pending verification if no documented evidence is provided

View the JSON record (opens in a new tab).

Assessment result: unset.