SFS 0: Operating System and Workstation Environment
Assess how operating systems and workstations are provisioned, maintained, and protected, including remote use, shared storage, device encryption, and operational logging.
Scope and boundaries
This set covers the working environment used by staff and administrators, including local, diskless, and remote workstations. It considers asset identification, approved system images, patching, local data, shared file systems, and the handling of device decryption keys. Its questions should identify the devices and review period in scope and connect each condition to configuration or operational evidence. Privileged access is addressed in SFS 1, recovery testing in SFS 2, and central monitoring in SFS 6.
The sixteen questions
Each SF position is one question. Both positions run from 0 to F.
| SF | Question page | Authoring record |
|---|---|---|
| 0 | SF 0 | 0000 |
| 1 | SF 1 | 0001 |
| 2 | SF 2 | 0002 |
| 3 | SF 3 | 0003 |
| 4 | SF 4 | 0004 |
| 5 | SF 5 | 0005 |
| 6 | SF 6 | 0006 |
| 7 | SF 7 | 0007 |
| 8 | SF 8 | 0008 |
| 9 | SF 9 | 0009 |
| A | SF A | 000A |
| B | SF B | 000B |
| C | SF C | 000C |
| D | SF D | 000D |
| E | SF E | 000E |
| F | SF F | 000F |
From questions to a profile
Only reviewed, accepted 0/1 assessments can populate the sixteen-bit set profile. SF 0 is the most significant bit and SF F the least significant bit. The completed result uses four hexadecimal digits, including leading zeros. A catalog definition does not establish a completed assessment profile.
Read assessment and validation, then encoding. A set profile preserves individual answers; it is not a summed security score.