SFS A / SF C

Back to SFS A

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are cryptographic keys securely destroyed when no longer required for organization-owned services throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented evidence confirming keys were erased using approved methods meeting NIST SP 800-88 standards

Assessment criterion and evidence

Actor: Organization. Scope: Cryptographic keys for organization-owned encryption and authentication services. Evidence period: Review period. Required evidence: Documented key destruction procedures aligned with organizational policy; Audit logs demonstrating timely execution of destruction processes. Negative criterion: Keys retained beyond necessity or destroyed through insecure means allowing potential reconstruction. Missing evidence: Pending verification pending evidence submission

View the JSON record (opens in a new tab).

Assessment result: unset.