SFS 9 / SF 1

Back to SFS 9

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has documented evidence confirmed that all security audit findings for in-scope applications were retested and verified as remediated within defined timeframes during the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: retested findings with verified remediation evidence

Assessment criterion and evidence

Actor: organization. Scope: in-scope applications' security audit findings. Evidence period: during review period. Required evidence: retest reports showing vulnerability resolution; evidence of verification steps for each finding. Negative criterion: unremediated critical findings persisting beyond timeframe. Missing evidence: pending status (scheduled audit ≠ executed verification)

View the JSON record (opens in a new tab).

Assessment result: unset.