SFS A / SF 4

Back to SFS A

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are cryptographic keys for organization-owned encryption services rotated according to documented organizational policy throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Keys rotated at documented intervals meeting policy requirements

Assessment criterion and evidence

Actor: organization-owned encryption services. Scope: cryptographic key rotation practices. Evidence period: review period. Required evidence: Documented key rotation policy with defined intervals; Verification records showing completed rotations. Negative criterion: Keys not rotated at required intervals or policy not followed. Missing evidence: No documented rotation schedule or verification evidence

View the JSON record (opens in a new tab).

Assessment result: unset.