SFS A / SF 8

Back to SFS A

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all cryptographic modules used for organization-owned data protection validated against current industry security standards throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Validated module certificates exist with current industry-standard validation status

Assessment criterion and evidence

Actor: Organization. Scope: Cryptographic modules protecting organization-owned data. Evidence period: Entire review period. Required evidence: Current cryptographic module validation certificates; Documentation showing validation status matches operational use period. Negative criterion: Unvalidated modules or outdated validation certificates detected. Missing evidence: Pending assessment when no validation documentation is available

View the JSON record (opens in a new tab).

Assessment result: unset.