SFS B / SF D

Back to SFS B

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all organization-owned Internet of Things devices confirmed free from known critical security flaws in their firmware versions throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented evidence showing all devices validated against current critical firmware vulnerability databases

Assessment criterion and evidence

Actor: organization. Scope: Internet of Things devices under organizational control. Evidence period: review period. Required evidence: Firmware vulnerability scan reports covering all devices; Documented validation against authoritative vulnerability databases. Negative criterion: Any device found with unaddressed known critical firmware vulnerabilities. Missing evidence: Pending assessment status when no validation evidence exists

View the JSON record (opens in a new tab).

Assessment result: unset.