Secures IoT devices so that neither the institution's own information security nor that of outsiders is impaired through them, preventing both unauthorised data outflow and the manipulation of the devices, especially with regard to attacks by third parties. In Edition 2023 the Baustein carries 24 requirement numbers, 20 of them live: 3 Basis requirements (B, MUSS, to be fulfilled first and without exception), 13 Standard requirements (S, SOLLTE) and 4 requirements for elevated protection needs (H), with 4 numbers withdrawn (ENTFALLEN) and kept for stable numbering. It is applied to an IT system in modelling order R2. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as SYS.4.4.A<n>.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.