Deals with all the security aspects institutions must observe when they develop software themselves, considering how an institution prepares and carries out software development, with the relevant threats identified and requirements formulated. In Edition 2023 the Baustein carries 22 requirement numbers, 18 of them live: 8 Basis requirements (B, MUSS, to be fulfilled first and without exception), 7 Standard requirements (S, SOLLTE) and 3 requirements for elevated protection needs (H), with 4 numbers withdrawn (ENTFALLEN) and kept for stable numbering. It is applied to the information domain as a whole (overarching aspects) in modelling order R3. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as CON.8.A<n>.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.