SFS D / SF B

Back to SFS D

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has the organization documented named role assignments for all critical security responsibilities and verified periodic compliance with these assignments throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented assignments with named roles and verified compliance evidence

Assessment criterion and evidence

Actor: organization. Scope: critical security responsibilities including policy enforcement and exception decisions. Evidence period: throughout the review period. Required evidence: Formally approved role-responsibility matrix with named individuals; Records confirming periodic verification of responsibility fulfillment. Negative criterion: Absence of role-specific assignments or unverified compliance claims. Missing evidence: Pending when assignment documentation exists but compliance verification records are unavailable

View the JSON record (opens in a new tab).

Assessment result: unset.