SFS B / SF A

Back to SFS B

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are firmware updates for all organization-owned Internet of Things devices cryptographically signed to verify integrity and origin throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: all firmware updates are verified through cryptographic signatures matching authorized sources

Assessment criterion and evidence

Actor: organization. Scope: all organization-owned Internet of Things (IoT) devices. Evidence period: the review period. Required evidence: deployment logs demonstrating successful cryptographic signature validation before installation. Negative criterion: at least one deployed firmware update lacks valid cryptographic verification. Missing evidence: evidence of signature verification is pending until documented deployment records are provided

View the JSON record (opens in a new tab).

Assessment result: unset.