SFS A / SF 5

Back to SFS A

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are cryptographic keys for organization-owned services generated using approved random number sources throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Keys generated using approved random number sources meeting cryptographic strength requirements

Assessment criterion and evidence

Actor: Organization. Scope: Cryptographic keys for organization-owned services. Evidence period: Review period. Required evidence: Documented key generation procedures; Validation of random number source compliance with organizational policy. Negative criterion: Keys generated using non-approved, predictable, or insufficient entropy sources. Missing evidence: Pending verification of key generation methodology documentation

View the JSON record (opens in a new tab).

Assessment result: unset.