Sets out how a working information security management system is established and developed during ongoing operation. In Edition 2023 the Baustein carries 17 requirement numbers, 16 of them live: 9 Basis requirements (B, MUSS, to be fulfilled first and without exception), 5 Standard requirements (S, SOLLTE) and 2 requirements for elevated protection needs (H), with 1 number withdrawn (ENTFALLEN) and kept for stable numbering. It is applied to the information domain as a whole (overarching aspects) in modelling order R1. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as ISMS.1.A<n>.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.