SFS 6 / SF C

Back to SFS 6

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has documented verification confirmed that security event log analysis procedures correctly classify potential incidents by severity level throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented verification of correctly classified incidents by severity

Assessment criterion and evidence

Actor: Organization's security operations team. Scope: All critical systems within declared security infrastructure. Evidence period: Review period specified in current assessment cycle. Required evidence: Documented analysis procedures specifying severity classification criteria; Verification records confirming correct implementation during review period. Negative criterion: Absence of documented verification for classification procedures. Missing evidence: Pending

View the JSON record (opens in a new tab).

Assessment result: unset.