SFS B / SF 2

Back to SFS B

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all organization-owned IoT devices configured to enforce secure boot mechanisms preventing unauthorized firmware execution throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Verified configuration settings and operational logs confirming secure boot enforcement

Assessment criterion and evidence

Actor: organization-owned IoT devices. Scope: All IoT devices forming part of the assessed system where secure boot is technically feasible. Evidence period: throughout the review period. Required evidence: Documented firmware validation configurations; Operational logs showing secure boot status during device initialization. Negative criterion: Absence of trusted boot chain verification or presence of unsigned firmware execution. Missing evidence: Pending verification when no configuration records or boot logs are available

View the JSON record (opens in a new tab).

Assessment result: unset.