Addresses institutions that operate a data centre and want to check in an audit whether they have implemented suitable security measures, and can also be used to estimate the security measures needed when IT is to be centralised in a data centre, with the overriding goal of protecting the IT operated there. In Edition 2023 the Baustein carries 30 requirement numbers, 27 of them live: 13 Basis requirements (B, MUSS, to be fulfilled first and without exception), 7 Standard requirements (S, SOLLTE) and 7 requirements for elevated protection needs (H), with 3 numbers withdrawn (ENTFALLEN) and kept for stable numbering. It is applied to a building or room in modelling order R2. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as INF.2.A<n>.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.