SFS A / SF F

Back to SFS A

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are cryptographic operations for organization-owned services protected by verified hardware security modules (HSMs) according to organizational policy throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: documented evidence confirms HSMs were used and validated per policy requirements

Assessment criterion and evidence

Actor: organization. Scope: cryptographic operations requiring highest assurance levels. Evidence period: review period. Required evidence: implementation logs showing HSM usage; certification documents for deployed HSMs. Negative criterion: verified HSMs not implemented where required by policy. Missing evidence: pending assessment pending documented verification evidence

View the JSON record (opens in a new tab).

Assessment result: unset.