SFS 4: Data Storage and Handling
Assess how data is classified, stored, accessed, shared, retained, and deleted across local, network-attached, and cloud storage.
Scope and boundaries
This set covers the lifecycle of data and documents, including ownership, storage locations, access rules, encryption, sharing, retention, deletion, and privacy-related handling conditions. Questions should identify the relevant data classes and systems and connect the stated policy to observable configuration or records. Storage copies and protection belong here, while demonstrated restoration and recovery objectives belong to SFS 2. Cryptographic services are addressed in SFS A, and cross-system interfaces in SFS C.
The sixteen questions
This set has sixteen SF positions, 0–F. Each position is one question, not another set. All questions below are unreviewed placeholders; no assessment result has been recorded.
| SF | Question page | Authoring record | Status |
|---|---|---|---|
0 | SF 0: placeholder | 0040 | Draft; result unset |
1 | SF 1: placeholder | 0041 | Draft; result unset |
2 | SF 2: placeholder | 0042 | Draft; result unset |
3 | SF 3: placeholder | 0043 | Draft; result unset |
4 | SF 4: placeholder | 0044 | Draft; result unset |
5 | SF 5: placeholder | 0045 | Draft; result unset |
6 | SF 6: placeholder | 0046 | Draft; result unset |
7 | SF 7: placeholder | 0047 | Draft; result unset |
8 | SF 8: placeholder | 0048 | Draft; result unset |
9 | SF 9: placeholder | 0049 | Draft; result unset |
A | SF A: placeholder | 004A | Draft; result unset |
B | SF B: placeholder | 004B | Draft; result unset |
C | SF C: placeholder | 004C | Draft; result unset |
D | SF D: placeholder | 004D | Draft; result unset |
E | SF E: placeholder | 004E | Draft; result unset |
F | SF F: placeholder | 004F | Draft; result unset |
From questions to a profile
Only reviewed, accepted 0/1 assessments can populate the sixteen-bit set profile. SF 0 is the most significant bit and SF F is the least significant bit. The completed result uses four hexadecimal digits, including leading zeros. There is no completed profile for this draft set.
Read assessment and validation, then encoding. A set profile preserves individual answers; it is not a summed security score.