+5.4.1 Organisation of the example

5.4.1 Organisation of the example

For the purposes of the example, the information is organised as shown below. This organisation is illustrative and does not define a schema, field names or a required implementation format.

	Information group	Function
Product identity and scope		Defines product identity, versioning, scope to which the information applies and the

manufacturer’s cryptographic signature

Control layer

Defines structured security objectives aligned with requirements, security principles

and/or applicable security policies or regulations

Implementation layer

Maps identified threats and security objectives to implemented controls, secure-default

settings and supporting implementation information

Assessment and	Records assessment results and links to supporting evidence, such as test results,
verification layer	configuration checks, SBOMs and build-artefact hashes

1. Resumen

Título	Estándar

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos
Fuente	Requisito

3. Regulaciones relacionadas

Regulaciones
Fuente	Regulación

ENISA -