SFS C / SF 0

Back to SFS C

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all organization-owned API endpoints configured to enforce mutual authentication between communicating services throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented configuration evidence showing mutual authentication requirements enforced for all interfaces

Assessment criterion and evidence

Actor: Organization-owned services. Scope: API endpoints used for data/command exchange between internal/external systems. Evidence period: Throughout the review period. Required evidence: API configuration documentation; Authentication protocol specifications. Negative criterion: No evidence or evidence showing optional/one-way authentication mechanisms. Missing evidence: Pending verification when implementation records are unavailable

View the JSON record (opens in a new tab).

Assessment result: unset.