5.13: Validate input data practice on usability. 5.12-2: The manufacturer should provide users with guidance on how to securely set up their device. 5.12-3: The manufacturer should provide users with guidance on how to check whether their device is securely set up. 5.13-1: The consumer IoT device software shall validate data input via user interfaces or transferred via Application Programming Interfaces (APIs) or between networks in services and devices. R R R R most appropriate security options turned on/selected. 2. Specific steps that guide users to securely set up the device. R R R R R R M M 3. Specific steps that guide users on checking whether the device is securely set up. Supporting evidence shall describe the input validation strategies employed for the following data-input interfaces: 1. Authentication mechanism (device management portal, companion mobile application, etc.) 2. All data-input text boxes within the various user-interfaces (device management portal, companion mobile applications, etc.). 3. All APIs used between networks in services and devices. Server to CLS Publication #2 | Page 41 of 49