SFS A / SF D

Back to SFS A

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all cryptographic operations for organization-owned services logged with sufficient detail to verify data integrity and prevent denial of actions throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Complete audit logs exist showing cryptographic operations, timestamps, and responsible parties

Assessment criterion and evidence

Actor: Organization. Scope: All organization-owned cryptographic services and operations. Evidence period: Entire review period. Required evidence: Documented audit trails capturing cryptographic operations. Negative criterion: Missing or incomplete logs failing to demonstrate operation validity and accountability. Missing evidence: Pending assessment when logs are unavailable or insufficiently detailed

View the JSON record (opens in a new tab).

Assessment result: unset.