SFS B / SF E

Back to SFS B

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all organization-owned Internet of Things devices configured to automatically trigger protective actions, including alerts and data safeguards, upon detection of physical tampering attempts throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Devices automatically trigger verified protective actions (e.g., alerts, data erasure) upon confirmed physical tampering detection

Assessment criterion and evidence

Actor: organization. Scope: all organization-owned Internet of Things devices. Evidence period: throughout the review period. Required evidence: Documented configuration specifying protective actions for physical tampering events; Test records confirming activation of protective actions during simulated tampering scenarios; Evidence of periodic verification that response mechanisms remain functional. Negative criterion: No configured response mechanisms or unverified/inconsistent activation of protective measures. Missing evidence: Pending until documented evidence of configuration specifications and successful test results is provided

View the JSON record (opens in a new tab).

Assessment result: unset.