+5.4.1 Organisation of the example

5.4.1 Organisation of the example

For the purposes of the example, the information is organised as shown below. This organisation is illustrative and does not define a schema, field names or a required implementation format.

	Information group	Function
Product identity and scope		Defines product identity, versioning, scope to which the information applies and the

manufacturer’s cryptographic signature

Control layer

Defines structured security objectives aligned with requirements, security principles

and/or applicable security policies or regulations

Implementation layer

Maps identified threats and security objectives to implemented controls, secure-default

settings and supporting implementation information

Assessment and	Records assessment results and links to supporting evidence, such as test results,
verification layer	configuration checks, SBOMs and build-artefact hashes

1. Ħarsa ġenerali

Titlu	Standard

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti
Sors	Rekwiżit

3. Regolamenti relatati

Regolamenti
Sors	Regolamentazzjoni

ENISA -