SFS C / SF 5

Back to SFS C

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all organization-owned MQTT message protocols configured to enforce encrypted transmissions to prevent eavesdropping throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Configuration evidence shows mandatory encryption (e.g., TLS) for all MQTT transmissions

Assessment criterion and evidence

Actor: Organization. Scope: MQTT message protocols used for data exchange between organizational services and external systems. Evidence period: Review period. Required evidence: System configuration logs verifying encryption enforcement; Network traffic analysis confirming encrypted payloads. Negative criterion: Unencrypted MQTT traffic observed or configuration permits plaintext transmissions. Missing evidence: Pending assessment due to unavailable configuration records

View the JSON record (opens in a new tab).

Assessment result: unset.