SFS A / SF E

Back to SFS A

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are encryption keys and digital signature keys kept separate and not used interchangeably throughout the review period as required by organizational policy?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented evidence shows cryptographic keys restricted exclusively to designated functions

Assessment criterion and evidence

Actor: Organization. Scope: All organization-owned cryptographic services. Evidence period: Review period. Required evidence: Organization's cryptographic key management policy; Configuration audit demonstrating functional separation of keys. Negative criterion: Evidence shows keys used outside intended purposes (e.g., encryption key used for digital signatures). Missing evidence: Pending

View the JSON record (opens in a new tab).

Assessment result: unset.