+5.4.1 Organisation of the example

5.4.1 Organisation of the example

For the purposes of the example, the information is organised as shown below. This organisation is illustrative and does not define a schema, field names or a required implementation format.

	Information group	Function
Product identity and scope		Defines product identity, versioning, scope to which the information applies and the

manufacturer’s cryptographic signature

Control layer

Defines structured security objectives aligned with requirements, security principles

and/or applicable security policies or regulations

Implementation layer

Maps identified threats and security objectives to implemented controls, secure-default

settings and supporting implementation information

Assessment and	Records assessment results and links to supporting evidence, such as test results,
verification layer	configuration checks, SBOMs and build-artefact hashes

1. Forbhreathnú

Teideal	Caighdeán

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais
Foinse	Ceanglas

3. Rialacháin ghaolmhara

Rialacháin
Foinse	Rialáil

ENISA -