Ensures that the software in use meets the technical and organisational requirements and the protection needs of the institution or of its individual units, with security-critical software checked systematically and methodically for existing vulnerabilities. In Edition 2023 the Baustein carries 16 requirement numbers, 14 of them live: 6 Basis requirements (B, MUSS, to be fulfilled first and without exception), 6 Standard requirements (S, SOLLTE) and 2 requirements for elevated protection needs (H), with 2 numbers withdrawn (ENTFALLEN) and kept for stable numbering. It is applied to the information domain as a whole (overarching aspects) in modelling order R1. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as OPS.1.1.6.A<n>.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.