Lighthouse/Sparkle Support: Are devices using lightweight cryptography for authentication (ECC-256 or equivalent)?

Secure Boot & Hardware Trust: Do devices implement a Hardware Root of Trust (e.g., TPM, Secure Element)?

Identity Integrity: Are device IDs (IMEI, EUI-64) cryptographically bound to the authentication token?

Southbound Interface (D-IF): Is payload data encrypted at the application layer (AES-128 GCM)? Audit the use of DTLS (Datagram TLS) for constrained networks (MQTT/NB-IoT).

Northbound API Security: Are the APIs exposed to 3rd-party application providers (Y.4401 N-IF) secured with OAuth 2.0/OIDC? Is there rate-limiting to prevent mIoT DDoS attacks on the core?

Lifecycle Management: Audit the OTA (Over-the-Air) firmware update mechanism. Is it signed?

Configuration Integrity: Are devices managed via secure protocols (LwM2M with DTLS or TR-069 with HTTPS)?

Isolation: Are IoT traffic slices logically isolated at the PGW/UPF level?

GSMA CLP.11 Alignment: Does the deployment meet the GSMA IoT Security Guidelines?

Privacy Compliance: Are sensors anonymizing PII before transmission to the cloud?