Shows which security requirements are to be met so that general software is used securely over its whole life cycle, with the overriding goal of protecting the software and the information processed with it. In Edition 2023 the Baustein carries 14 requirement numbers, 14 of them live: 5 Basis requirements (B, MUSS, to be fulfilled first and without exception), 8 Standard requirements (S, SOLLTE) and 1 requirements for elevated protection needs (H). It is applied to an application in modelling order R2. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as APP.6.A<n>.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.