Specialized Assets, such as IoT devices or GFE, are documented in the System Security Plan (SSP), outlining how the OSA manages them using risk-based security policies, procedures, and practices. Assessors review the SSP to ensure appropriate management of these assets. They are not assessed against other CMMC security requirements unless specific concerns arise.