SFS B / SF 4

Back to SFS B

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all organization-owned Internet of Things (IoT) devices uniquely identified and maintained in an accurate inventory throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Complete inventory exists showing unique identification of every IoT device with maintained accuracy

Assessment criterion and evidence

Actor: Organization. Scope: All organization-owned Internet of Things (IoT) devices within the declared assessment boundary. Evidence period: Throughout the review period. Required evidence: Documented inventory listing all IoT devices with unique identifiers; Evidence of periodic verification against physical device deployment; Records showing inventory maintenance processes. Negative criterion: Missing, duplicated, or inaccurate device records in the inventory documentation. Missing evidence: Pending verification due to absence of documented inventory records

View the JSON record (opens in a new tab).

Assessment result: unset.