SFS B / SF 6

Back to SFS B

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all organization-owned Internet of Things devices configured to secure exposed communication interfaces against unauthorized access throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented configuration evidence showing communication interfaces are restricted to authorized protocols and endpoints

Assessment criterion and evidence

Actor: Organization. Scope: All Internet of Things devices forming part of the assessed system. Evidence period: Throughout the review period. Required evidence: Device configuration documentation; Network access control rules; Interface security testing reports. Negative criterion: Documented evidence of interfaces accepting unauthorized connections or default credentials. Missing evidence: Pending verification when configuration records or access testing results are unavailable

View the JSON record (opens in a new tab).

Assessment result: unset.