SFS D / SF 6

Back to SFS D

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has the organization documented and followed a scheduled process for reviewing and updating its security policy at defined intervals throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented review schedule exists and evidence of completed reviews

Assessment criterion and evidence

Actor: organization. Scope: security policy review process. Evidence period: review period. Required evidence: Documented review schedule specifying intervals; Records of completed policy reviews including updates. Negative criterion: No documented schedule or evidence of reviews conducted. Missing evidence: Pending evidence of review schedule and activity

View the JSON record (opens in a new tab).

Assessment result: unset.