Equipment must use operating system versions that are continuously supported by the original vendor. Clearly documented procedures for applying security updates and patches, including compatibility, dependency, and performance impact assessments.

Mandatory support for secure communication protocols, including HTTPS, SFTP, SSH, etc., to ensure data transmission security. Detailed network configuration guidelines and capabilities for securely adjusting network ports and services.

Rigorous vulnerability scans performed prior to equipment shipment, with professional reports provided to ensure no critical vulnerabilities exist. Malware scanning reports to confirm equipment is free from malware before shipment. Defined security hardening guidelines, including disabling USB ports, minimizing system services, and comprehensive malware prevention measures.

Equipment must have robust access control mechanisms to log all security-related events. Detailed event logging, including access control events, configuration changes, system errors, event types, user accounts, and timestamps.