Establishes information security as an integral part of NAC, so that access to the network is regulated by identity-dependent authorisation rules and the information processed, stored and transmitted over networks is protected. In Edition 2023 the Baustein carries 27 requirement numbers, 27 of them live: 1 Basis requirements (B, MUSS, to be fulfilled first and without exception), 18 Standard requirements (S, SOLLTE) and 8 requirements for elevated protection needs (H). It is applied to an IT system in modelling order R2. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as NET.3.4.A<n>.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.