SFS C: Interfacing Protocols and APIs
Assess the trust boundaries and behavior of interfaces used to exchange data or commands between services, devices, and external systems.
Scope and boundaries
This set covers API contracts, message protocols such as MQTT, interface authentication and authorization, input validation, error handling, and control of exchanged data. It includes integration tests and mock interfaces where they support verification. Questions should identify the communicating parties, allowed operations, and evidence that the interface enforces its stated conditions. Network transport restrictions belong to SFS 5, identity management to SFS 3, and data lifecycle rules to SFS 4.
The sixteen questions
This set has sixteen SF positions, 0–F. Each position is one question, not another set. All questions below are unreviewed placeholders; no assessment result has been recorded.
| SF | Question page | Authoring record | Status |
|---|---|---|---|
0 | SF 0: placeholder | 00C0 | Draft; result unset |
1 | SF 1: placeholder | 00C1 | Draft; result unset |
2 | SF 2: placeholder | 00C2 | Draft; result unset |
3 | SF 3: placeholder | 00C3 | Draft; result unset |
4 | SF 4: placeholder | 00C4 | Draft; result unset |
5 | SF 5: placeholder | 00C5 | Draft; result unset |
6 | SF 6: placeholder | 00C6 | Draft; result unset |
7 | SF 7: placeholder | 00C7 | Draft; result unset |
8 | SF 8: placeholder | 00C8 | Draft; result unset |
9 | SF 9: placeholder | 00C9 | Draft; result unset |
A | SF A: placeholder | 00CA | Draft; result unset |
B | SF B: placeholder | 00CB | Draft; result unset |
C | SF C: placeholder | 00CC | Draft; result unset |
D | SF D: placeholder | 00CD | Draft; result unset |
E | SF E: placeholder | 00CE | Draft; result unset |
F | SF F: placeholder | 00CF | Draft; result unset |
From questions to a profile
Only reviewed, accepted 0/1 assessments can populate the sixteen-bit set profile. SF 0 is the most significant bit and SF F is the least significant bit. The completed result uses four hexadecimal digits, including leading zeros. There is no completed profile for this draft set.
Read assessment and validation, then encoding. A set profile preserves individual answers; it is not a summed security score.