SFS D / SF 2

Back to SFS D

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has the organization's security policy been formally approved by designated management authorities at least once during the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: documented evidence of formal security policy approval by authorized management

Assessment criterion and evidence

Actor: designated management authorities. Scope: organization's security policy documentation and approval records. Evidence period: review period. Required evidence: Formal security policy document bearing management approval signature/date within review period. Negative criterion: absence of documented approval evidence meeting authorization requirements. Missing evidence: pending verification until documented approval evidence is provided

View the JSON record (opens in a new tab).

Assessment result: unset.