IoT Device Security Risk Assessment Questionnaire
Device Information
Device Name
Manufacturer
Model
Firmware Version
Device Location
Connectivity & Access
Network Connectivity Type
Wi-Fi
Ethernet
Cellular
Bluetooth
Zigbee/Z-Wave
Other
Is remote access enabled?
Yes
No
Authentication Methods Used
Data Security
Data Collected by Device
Is data encrypted in transit?
Yes
No
Is data encrypted at rest?
Yes
No
Firmware & Software Updates
Automatic Updates Supported?
Yes
No
Update Frequency
Update Method
Vulnerability Management
How are vulnerabilities reported/remediated?
Known vulnerabilities?
Access Control
Default credentials changed?
Yes
No
Supports multi-factor authentication?
Yes
No
Additional Comments