Blockchain Transaction Lifecycle Security Standard Audit Framework

previous: Compare Old Transactions | Contents | next: Verify Correct Ordering

Require Multiple Signers

Statement of Requirement

Signature Managers MUST enable multi-signature approval policies

See it in the specification

Applicability

• Signature Managers

Purpose

Ensure that high-value or sensitive transactions can have an appropriate safety threshold of multiple signers for approval

Audit Procedure

Verify that the Signature Manager enables requiring that multiple parties sign the transaction.

Success Criteria

The Signature Manager requires multiple signatories where configured.

Best Practice

The Signature Manager provides a mechanism to identify relevant transactions, and requires settings that include multiple parties signing as an appropriate protection, as part of Enable Transaction Policies for Signing

Failure Criteria

• There is no mechanism to designate a multiple signature requirement for a transaction
• The Signature Manager does not enforce the use of Multisig for transactions that are designated as requiring them

Key Evidence

• User Interface
• Reperformance
• Evidence provided for Apply Transaction Policies for Signing and Enable Transaction Policies for Signing

previous: Compare Old Transactions | Contents | next: Verify Correct Ordering