SFS 0 / SF D
Status: Question model review passed; solution and completed SF authoring pending.
This is a generated authoring draft. Human approval and operational assessment results have not been supplied.
Question
Are all organization-owned workstations configured to prevent unauthorized boot from external media throughout the review period?
Plain-language explanation
Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Workstations have BIOS/UEFI settings blocking boot from USB/CD/network devices
Assessment criterion and evidence
Actor: Organization's IT department. Scope: All organization-owned workstations. Evidence period: Review period. Required evidence: BIOS/UEFI configuration reports; Firmware security audit logs. Negative criterion: Some workstations allow booting from removable media without authentication. Missing evidence: Pending verification of system firmware configurations
View the JSON record (opens in a new tab).
Assessment result: unset.