SFS A / SF 3

Back to SFS A

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are cryptographic integrity mechanisms in place to detect unauthorized alterations of critical data throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented implementation and operational verification of cryptographic integrity mechanisms (e.g., hash checks, digital signatures) successfully detecting unauthorized alterations

Assessment criterion and evidence

Actor: Organization's cryptographic service administrators. Scope: All critical data storage and transmission systems. Evidence period: Throughout the review period. Required evidence: Configuration specifications for integrity mechanisms; Operational logs demonstrating alteration detection events; Periodic validation test results confirming mechanism effectiveness. Negative criterion: Absence of documented cryptographic integrity mechanisms or verified evidence of undetected data alterations. Missing evidence: Pending assessment due to lack of implementation documentation or verification records

View the JSON record (opens in a new tab).

Assessment result: unset.