SFS B: Hardware-Oriented Security and IoT Auditing
Assess the trust, maintenance, and protection of hardware and Internet of Things devices, including secure boot, firmware, and physical access.
Scope and boundaries
This set covers device inventories, hardware trust mechanisms, firmware provenance and updates, exposed interfaces, physical and environmental safeguards, and device retirement. Questions should identify the device classes, supported configurations, and evidence needed to establish the stated condition. The scope includes IoT devices where they form part of the assessed system. Workstation operating-system management belongs to SFS 0, network controls to SFS 5, and application protocols to SFS C.
The sixteen questions
This set has sixteen SF positions, 0–F. Each position is one question, not another set. All questions below are unreviewed placeholders; no assessment result has been recorded.
| SF | Question page | Authoring record | Status |
|---|---|---|---|
0 | SF 0: placeholder | 00B0 | Draft; result unset |
1 | SF 1: placeholder | 00B1 | Draft; result unset |
2 | SF 2: placeholder | 00B2 | Draft; result unset |
3 | SF 3: placeholder | 00B3 | Draft; result unset |
4 | SF 4: placeholder | 00B4 | Draft; result unset |
5 | SF 5: placeholder | 00B5 | Draft; result unset |
6 | SF 6: placeholder | 00B6 | Draft; result unset |
7 | SF 7: placeholder | 00B7 | Draft; result unset |
8 | SF 8: placeholder | 00B8 | Draft; result unset |
9 | SF 9: placeholder | 00B9 | Draft; result unset |
A | SF A: placeholder | 00BA | Draft; result unset |
B | SF B: placeholder | 00BB | Draft; result unset |
C | SF C: placeholder | 00BC | Draft; result unset |
D | SF D: placeholder | 00BD | Draft; result unset |
E | SF E: placeholder | 00BE | Draft; result unset |
F | SF F: placeholder | 00BF | Draft; result unset |
From questions to a profile
Only reviewed, accepted 0/1 assessments can populate the sixteen-bit set profile. SF 0 is the most significant bit and SF F is the least significant bit. The completed result uses four hexadecimal digits, including leading zeros. There is no completed profile for this draft set.
Read assessment and validation, then encoding. A set profile preserves individual answers; it is not a summed security score.