EMB

Embedded Technology

27 controls

Apply risk-based security, compliance and resilience practices to embedded technologies where compromise or misuse could create operational, safety and/or data protection impacts.

SCF #	Control Name	Weight	NIST CSF	Frameworks
EMB-01	Embedded Technology Policy	10 — Critical	Govern	0
EMB-02	Embedded Technology Security Program	10 — Critical	Protect	13
EMB-03	Separate Operating Environments For Embedded Technologies	9 — Critical	Protect	3
EMB-04	Embedded Technology Inventory Management	8 — High	Identify	7
EMB-05	Internet of Things (IOT)	9 — Critical	Protect	1
EMB-06	Operational Technology (OT)	9 — Critical	Protect	4
EMB-07	Interface Security	4 — Medium	Protect	5
EMB-08	Embedded Technology Configuration Monitoring	6 — Medium	Detect	8
EMB-09	Prevent Alterations	6 — Medium	Protect	7
EMB-10	Embedded Technology Maintenance	6 — Medium	Protect	2
EMB-11	Resilience To Outages	2 — Low	Protect	3
EMB-12	Power Level Monitoring	4 — Medium	Detect	4
EMB-13	Embedded Technology Reviews	8 — High	Identify	3
EMB-14	Message Queuing Telemetry Transport (MQTT) Security	7 — High	Protect	2
EMB-15	Remote Management of Embedded Technologies	8 — High	Protect	3
EMB-16	Restrict Communications	8 — High	Protect	3
EMB-17	Authorized Communications	8 — High	Protect	4
EMB-18	Operating Environment Certification	9 — Critical	Identify	2
EMB-19	Safety Assessment	9 — Critical	Identify	7
EMB-20	Certificate-Based Authentication	5 — Medium	Protect	2
EMB-21	Chip-To-Cloud Security	6 — Medium	Protect	1
EMB-22	Real-Time Operating System (RTOS) Security	5 — Medium	Protect	2
EMB-23	Safe Operations	9 — Critical	Protect	2
EMB-24	Proximity Sensor	9 — Critical	Protect	0
EMB-25	Safety Instrumented System (SIS)	8 — High	Protect	2
EMB-26	Safety Instrumented Function (SIF)	7 — High	Protect	1
EMB-27	Safety Integrity Level (SIL)	6 — Medium	Identify	0

The Secure Controls Framework (SCF) is maintained by SCF Council. Use of SCF content is subject to the SCF Terms & Conditions.

Embedded Technology

Manage SCF Controls in SCF Connect