SFS D / SF 0

Back to SFS D

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has the organization designated and documented specific individuals with authority to approve security policy exceptions throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented evidence showing named individuals authorized to approve security policy exceptions

Assessment criterion and evidence

Actor: organization. Scope: security policy exception approval authorities. Evidence period: throughout the review period. Required evidence: Documented exception approval policy; List of authorized approvers. Negative criterion: No documented evidence of authorized exception approvers or approval process. Missing evidence: Pending documentation of exception approval authorities

View the JSON record (opens in a new tab).

Assessment result: unset.