Draft catalog: 16 sets and 256 questions. Browse the catalog →
UNIQ²MeHomeHomeMethodologyMethodologyCatalogCatalogMASKSMASKSAboutAboutContactContactRepositoryRepository
GitHub repository (opens in a new tab)
  • Catalog status
  • What is an SFS?
  • What is an SF?
  • Browse sets
    • SFS 0 — Operating Systems and Workstations
      • [non-validated] Question 0 (placeholder)
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Question 9 (placeholder)
      • [non-validated] Question A (placeholder)
      • [non-validated] Question B (placeholder)
      • [non-validated] Question C (placeholder)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS 1 — Administrator and Master Keys
      • [non-validated] Question 0 (placeholder)
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Question 9 (placeholder)
      • [non-validated] Question A (placeholder)
      • [non-validated] Question B (placeholder)
      • [non-validated] Question C (placeholder)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS 2 — Backup and Disaster Recovery
      • [non-validated] Question 0 (placeholder)
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Question 9 (placeholder)
      • [non-validated] Question A (placeholder)
      • [non-validated] Question B (placeholder)
      • [non-validated] Question C (placeholder)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS 3 — Authentication and Authorization
      • [non-validated] Question 0 (placeholder)
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Question 9 (placeholder)
      • [non-validated] Question A (placeholder)
      • [non-validated] Question B (placeholder)
      • [non-validated] Question C (placeholder)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS 4 — Data Storage and Handling
      • [non-validated] Question 0 (placeholder)
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Question 9 (placeholder)
      • [non-validated] Question A (placeholder)
      • [non-validated] Question B (placeholder)
      • [non-validated] Question C (placeholder)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS 5 — Networking and VPNs
      • [non-validated] Verified ZTNA Implementation for Remote Access
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Dual Tunnel Implementation Verification
      • [non-validated] Question A (placeholder)
      • [non-validated] Question B (placeholder)
      • [non-validated] Question C: Certificate-Based Authentication for Remote Access
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS 6 — Logging and Incident Response
      • [non-validated] Question 0 (placeholder)
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Question 9 (placeholder)
      • [non-validated] Question A (placeholder)
      • [non-validated] Question B (placeholder)
      • [non-validated] Question C (placeholder)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS 7 — Software Development Lifecycle
      • [non-validated] Question 0 (placeholder)
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Question 9 (placeholder)
      • [non-validated] Question A (placeholder)
      • [non-validated] Question B (placeholder)
      • [non-validated] Question C (placeholder)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS 8 — Secure Development and Risk
      • [non-validated] Question 0 (placeholder)
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Documented Risk Management Procedures in Development Lifecycle
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Documented Security Design Reviews per NIST PW.2
      • [non-validated] Question A (placeholder)
      • [non-validated] Question B (placeholder)
      • [non-validated] Question C (placeholder)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS 9 — Software Security Auditing
      • [non-validated] Question 0 (placeholder)
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Question 9 (placeholder)
      • [non-validated] Question A (placeholder)
      • [non-validated] Question B (placeholder)
      • [non-validated] Question C (placeholder)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS A — Cryptography and Blockchain
      • [non-validated] Question 0 (placeholder)
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Question 9 (placeholder)
      • [non-validated] Question A (placeholder)
      • [non-validated] Question B (placeholder)
      • [non-validated] Question C (placeholder)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS B — Hardware and IoT Security
      • [non-validated] Question 0 (placeholder)
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Question 9 (placeholder)
      • [non-validated] Question A (placeholder)
      • [non-validated] Question B (placeholder)
      • [non-validated] Question C (placeholder)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS C — Protocols and APIs
      • [non-validated] Question 0 (placeholder)
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Question 9 (placeholder)
      • [non-validated] Question A (placeholder)
      • [non-validated] Question B (placeholder)
      • [non-validated] Question C (placeholder)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS D — Roles and Security Policy
      • [non-validated] Management-Approved Roles and Responsibilities Documentation
      • [non-validated] Post-Incident Roles Review Compliance
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Security Policy Updates for Supplier Onboarding
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Question 9 (placeholder)
      • [non-validated] Documented Authorization Boundaries for Privileged Actions (NIS2 Art. 21)
      • [non-validated] Question B (placeholder)
      • [non-validated] Management-Approved Roles Documentation (NIS2 Art.21)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS E — AI Training and Implementation
      • [non-validated] Question 0 (placeholder)
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Question 9 (placeholder)
      • [non-validated] Documented Fairness Evaluation with Human Review
      • [non-validated] Question B (placeholder)
      • [non-validated] Documented PII Sanitization in AI Training Data Processing (SF C)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
    • SFS F — AI Live Systems
      • [non-validated] Question 0 (placeholder)
      • [non-validated] Question 1 (placeholder)
      • [non-validated] Question 2 (placeholder)
      • [non-validated] Question 3 (placeholder)
      • [non-validated] Question 4 (placeholder)
      • [non-validated] Question 5 (placeholder)
      • [non-validated] Question 6 (placeholder)
      • [non-validated] Question 7 (placeholder)
      • [non-validated] Question 8 (placeholder)
      • [non-validated] Question 9 (placeholder)
      • [non-validated] Question A (placeholder)
      • [non-validated] Question B (placeholder)
      • [non-validated] Question C (placeholder)
      • [non-validated] Question D (placeholder)
      • [non-validated] Question E (placeholder)
      • [non-validated] Question F (placeholder)
  • Requirement masks
    • Requirement masks
  • Live progress
  • Home
  • Methodology
    • Methodology overview
    • Introduction
    • Terms and notation
    • Evidence and interpretation
    • Question records
    • Assessment and validation
    • Assessment encoding
    • Requirement masks
    • Catalog versions
    • Worked examples
    • AI-assisted assessment
    • Frequently asked questions
    • Resources and related work
  • Catalog
    • Catalog status
    • What is an SFS?
    • What is an SF?
    • Browse sets
      • SFS 0 — Operating Systems and Workstations
        • [non-validated] Question 0 (placeholder)
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Question 9 (placeholder)
        • [non-validated] Question A (placeholder)
        • [non-validated] Question B (placeholder)
        • [non-validated] Question C (placeholder)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS 1 — Administrator and Master Keys
        • [non-validated] Question 0 (placeholder)
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Question 9 (placeholder)
        • [non-validated] Question A (placeholder)
        • [non-validated] Question B (placeholder)
        • [non-validated] Question C (placeholder)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS 2 — Backup and Disaster Recovery
        • [non-validated] Question 0 (placeholder)
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Question 9 (placeholder)
        • [non-validated] Question A (placeholder)
        • [non-validated] Question B (placeholder)
        • [non-validated] Question C (placeholder)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS 3 — Authentication and Authorization
        • [non-validated] Question 0 (placeholder)
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Question 9 (placeholder)
        • [non-validated] Question A (placeholder)
        • [non-validated] Question B (placeholder)
        • [non-validated] Question C (placeholder)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS 4 — Data Storage and Handling
        • [non-validated] Question 0 (placeholder)
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Question 9 (placeholder)
        • [non-validated] Question A (placeholder)
        • [non-validated] Question B (placeholder)
        • [non-validated] Question C (placeholder)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS 5 — Networking and VPNs
        • [non-validated] Verified ZTNA Implementation for Remote Access
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Dual Tunnel Implementation Verification
        • [non-validated] Question A (placeholder)
        • [non-validated] Question B (placeholder)
        • [non-validated] Question C: Certificate-Based Authentication for Remote Access
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS 6 — Logging and Incident Response
        • [non-validated] Question 0 (placeholder)
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Question 9 (placeholder)
        • [non-validated] Question A (placeholder)
        • [non-validated] Question B (placeholder)
        • [non-validated] Question C (placeholder)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS 7 — Software Development Lifecycle
        • [non-validated] Question 0 (placeholder)
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Question 9 (placeholder)
        • [non-validated] Question A (placeholder)
        • [non-validated] Question B (placeholder)
        • [non-validated] Question C (placeholder)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS 8 — Secure Development and Risk
        • [non-validated] Question 0 (placeholder)
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Documented Risk Management Procedures in Development Lifecycle
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Documented Security Design Reviews per NIST PW.2
        • [non-validated] Question A (placeholder)
        • [non-validated] Question B (placeholder)
        • [non-validated] Question C (placeholder)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS 9 — Software Security Auditing
        • [non-validated] Question 0 (placeholder)
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Question 9 (placeholder)
        • [non-validated] Question A (placeholder)
        • [non-validated] Question B (placeholder)
        • [non-validated] Question C (placeholder)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS A — Cryptography and Blockchain
        • [non-validated] Question 0 (placeholder)
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Question 9 (placeholder)
        • [non-validated] Question A (placeholder)
        • [non-validated] Question B (placeholder)
        • [non-validated] Question C (placeholder)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS B — Hardware and IoT Security
        • [non-validated] Question 0 (placeholder)
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Question 9 (placeholder)
        • [non-validated] Question A (placeholder)
        • [non-validated] Question B (placeholder)
        • [non-validated] Question C (placeholder)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS C — Protocols and APIs
        • [non-validated] Question 0 (placeholder)
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Question 9 (placeholder)
        • [non-validated] Question A (placeholder)
        • [non-validated] Question B (placeholder)
        • [non-validated] Question C (placeholder)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS D — Roles and Security Policy
        • [non-validated] Management-Approved Roles and Responsibilities Documentation
        • [non-validated] Post-Incident Roles Review Compliance
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Security Policy Updates for Supplier Onboarding
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Question 9 (placeholder)
        • [non-validated] Documented Authorization Boundaries for Privileged Actions (NIS2 Art. 21)
        • [non-validated] Question B (placeholder)
        • [non-validated] Management-Approved Roles Documentation (NIS2 Art.21)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS E — AI Training and Implementation
        • [non-validated] Question 0 (placeholder)
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Question 9 (placeholder)
        • [non-validated] Documented Fairness Evaluation with Human Review
        • [non-validated] Question B (placeholder)
        • [non-validated] Documented PII Sanitization in AI Training Data Processing (SF C)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
      • SFS F — AI Live Systems
        • [non-validated] Question 0 (placeholder)
        • [non-validated] Question 1 (placeholder)
        • [non-validated] Question 2 (placeholder)
        • [non-validated] Question 3 (placeholder)
        • [non-validated] Question 4 (placeholder)
        • [non-validated] Question 5 (placeholder)
        • [non-validated] Question 6 (placeholder)
        • [non-validated] Question 7 (placeholder)
        • [non-validated] Question 8 (placeholder)
        • [non-validated] Question 9 (placeholder)
        • [non-validated] Question A (placeholder)
        • [non-validated] Question B (placeholder)
        • [non-validated] Question C (placeholder)
        • [non-validated] Question D (placeholder)
        • [non-validated] Question E (placeholder)
        • [non-validated] Question F (placeholder)
    • Requirement masks
      • Requirement masks
    • Live progress
  • MASKS
    • MASKS overview
    • Complete catalog masks
    • Scoring Factor Set masks
    • Individual SF masks
  • About
  • Contact
  • Repository
Suggest a correction → (opens in a new tab)Edit this page on GitHub →
Catalog
What is an SFS?

Scoring Factor Sets

Each SFS groups sixteen factors in one fixed area of interest. The sixteen sets are identified by 0–F. Browse the sets.

Catalog statusWhat is an SF?

2026 © UNIQ2Me — Methodology and draft question catalog