Describes the requirements to be met and implemented so that an institution is effectively protected against malware. In Edition 2023 the Baustein carries 15 requirement numbers, 12 of them live: 6 Basis requirements (B, MUSS, to be fulfilled first and without exception), 1 Standard requirements (S, SOLLTE) and 5 requirements for elevated protection needs (H), with 3 numbers withdrawn (ENTFALLEN) and kept for stable numbering. It is applied to the information domain as a whole (overarching aspects) in modelling order R1. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as OPS.1.1.4.A<n>.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.