The 16 sets and 256 questions
This is the draft English question catalog, not an assessment result. Each set contains sixteen Scoring Factors (SFs), numbered 0–F. Every SF is one question; the sixteen sets therefore contain 256 questions.
All 256 questions are currently unreviewed placeholders. The topic descriptions define each set's intended scope, but the individual conditions and evidence rules still need to be written and reviewed. An unset result (null) is neither a failure (0) nor a pass (1), and these drafts must not be encoded as a completed profile.
| SFS | Topic | Questions | Status |
|---|---|---|---|
0 | Operating System and Workstation Environment | 16: 0–F | Placeholders |
1 | Administrator and Master Keys | 16: 0–F | Placeholders |
2 | Backup and Disaster Recovery Plan | 16: 0–F | Placeholders |
3 | Authentication and Authorization | 16: 0–F | Placeholders |
4 | Data Storage and Handling | 16: 0–F | Placeholders |
5 | Networking and VPNs | 16: 0–F | Placeholders |
6 | Logging, Monitoring, and Incident Response | 16: 0–F | Placeholders |
7 | Software Development Lifecycle | 16: 0–F | Placeholders |
8 | Secure Development Lifecycle and Risk Management | 16: 0–F | Placeholders |
9 | Software Security Auditing | 16: 0–F | Placeholders |
A | Cryptographic and Blockchain Infrastructure | 16: 0–F | Placeholders |
B | Hardware-Oriented Security and IoT Auditing | 16: 0–F | Placeholders |
C | Interfacing Protocols and APIs | 16: 0–F | Placeholders |
D | Roles, Responsibilities, Authorities, and Security Policy | 16: 0–F | Placeholders |
E | AI-Oriented Ethics (Training and Implementation) | 16: 0–F | Placeholders |
F | AI-Oriented Ethics (Live Systems) | 16: 0–F | Placeholders |
Choose the right reading path
- Scoring Factor Sets (SFS) explains how sixteen SFs form a set.
- Scoring Factors (SF) explains what an individual question must contain.
- Methodology explains evidence, assessment, encoding, and requirement masks.
The hexadecimal positions identify locations in a catalog; they do not rank the topics by importance. Draft repository IDs identify authoring records, not frozen editions or system-specific assessment results.