SFS A / SF 0

Back to SFS A

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are encryption services for all organization-owned data configured with approved cryptographic standards throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: encryption services use cryptographic standards approved by relevant authorities

Assessment criterion and evidence

Actor: organization. Scope: encryption services protecting organization-owned data. Evidence period: the review period. Required evidence: Documented configuration specifying approved cryptographic algorithms and parameters; Audit evidence confirming correct implementation in operational systems. Negative criterion: encryption services use deprecated or unapproved cryptographic standards. Missing evidence: no verifiable configuration records or implementation evidence provided

View the JSON record (opens in a new tab).

Assessment result: unset.