SFS B / SF F

Back to SFS B

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all organization-owned Internet of Things devices assigned unique security identifiers to prevent impersonation and ensure protected communications throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Devices possess verified unique security identifiers preventing unauthorized impersonation and ensuring communications are protected

Assessment criterion and evidence

Actor: organization. Scope: all organization-owned Internet of Things devices. Evidence period: throughout the review period. Required evidence: Device inventory records showing unique security identifier assignments; Configuration evidence demonstrating active protection of communications using these identifiers. Negative criterion: Devices share or lack unique identifiers, permitting unauthorized devices to impersonate legitimate ones or intercept communications. Missing evidence: Pending verification of unique identifier assignments and communication protection evidence

View the JSON record (opens in a new tab).

Assessment result: unset.