SFS D / SF 5

Back to SFS D

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Have security responsibilities been formally documented with named role assignments throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented assignment of specific security duties to named roles/individuals

Assessment criterion and evidence

Actor: Organization management. Scope: Definition of security duties and accountabilities. Evidence period: Review period. Required evidence: Formal role assignment documentation; Evidence of communication to responsible parties. Negative criterion: Security responsibilities not formally assigned to identified roles. Missing evidence: Pending assessment

View the JSON record (opens in a new tab).

Assessment result: unset.