SFS C / SF 9

Back to SFS C

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all organization-owned API endpoints configured to validate incoming data against business-specific rules to prevent processing of logically invalid requests throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: API endpoints reject requests violating defined business logic rules (e.g., invalid date ranges, inconsistent monetary values)

Assessment criterion and evidence

Actor: organization-owned API endpoints. Scope: API endpoints owned by the organization handling data exchange between services. Evidence period: throughout the review period. Required evidence: API configuration records showing business rule validation implementation. Negative criterion: API endpoints process requests that violate business logic rules despite technical schema validation. Missing evidence: pending

View the JSON record (opens in a new tab).

Assessment result: unset.