SFS B / SF 0

Back to SFS B

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all organization-owned IoT devices using firmware identical to the original manufacturer version or an approved updated version throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented evidence confirms firmware versions correspond to manufacturer-released or organization-approved versions

Assessment criterion and evidence

Actor: organization. Scope: IoT devices in the organization's asset inventory, excluding general-purpose computing devices managed under workstation controls (SFS 0). Evidence period: review period. Required evidence: Device firmware version documentation; Records of manufacturer or organizational approval for firmware versions. Negative criterion: Evidence shows use of modified, unauthorized, or unknown-origin firmware. Missing evidence: Pending verification when firmware version records are unavailable

View the JSON record (opens in a new tab).

Assessment result: unset.