SFS B / SF 1

Back to SFS B

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are physical access controls for all organization-owned IoT devices maintained to prevent unauthorized tampering throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented physical barriers, lock mechanisms, or environmental controls preventing unauthorized physical interaction

Assessment criterion and evidence

Actor: Organization maintaining IoT devices. Scope: All organization-owned IoT devices including sensors, controllers, and edge devices. Evidence period: Entire review period. Required evidence: Inventory of IoT device locations with physical security classifications; Records of定期 physical security inspections. Negative criterion: Evidence of bypassed locks, exposed interfaces, or unsecured device locations enabling physical tampering. Missing evidence: Pending assessment when no verifiable access control documentation or inspection records exist

View the JSON record (opens in a new tab).

Assessment result: unset.