+5.4.1 Organisation of the example

5.4.1 Organisation of the example

For the purposes of the example, the information is organised as shown below. This organisation is illustrative and does not define a schema, field names or a required implementation format.

	Information group	Function
Product identity and scope		Defines product identity, versioning, scope to which the information applies and the

manufacturer’s cryptographic signature

Control layer

Defines structured security objectives aligned with requirements, security principles

and/or applicable security policies or regulations

Implementation layer

Maps identified threats and security objectives to implemented controls, secure-default

settings and supporting implementation information

Assessment and	Records assessment results and links to supporting evidence, such as test results,
verification layer	configuration checks, SBOMs and build-artefact hashes

1. Pārskats

Nosaukums	Standarts

1.1 Atsauces

1.2 Identificētās prasības

1.3 Saistītie tiesību akti

2. Identificētās prasības

Prasības
Avots	Prasība

3. Saistītie tiesību akti

Tiesību akti
Avots	Regulējums

ENISA -