+5.4.1 Organisation of the example

5.4.1 Organisation of the example

For the purposes of the example, the information is organised as shown below. This organisation is illustrative and does not define a schema, field names or a required implementation format.

	Information group	Function
Product identity and scope		Defines product identity, versioning, scope to which the information applies and the

manufacturer’s cryptographic signature

Control layer

Defines structured security objectives aligned with requirements, security principles

and/or applicable security policies or regulations

Implementation layer

Maps identified threats and security objectives to implemented controls, secure-default

settings and supporting implementation information

Assessment and	Records assessment results and links to supporting evidence, such as test results,
verification layer	configuration checks, SBOMs and build-artefact hashes

1. Oversigt

Titel	Standard

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav
Kilde	Krav

3. Relaterede reguleringer

Reguleringer
Kilde	Regulering

ENISA -