ISO/IEC 27566-1:2025 9.1: Attack and contra-indicator analysis
What does 9.1 require?
The framework treats attacks and contra-indicators as a system concern. The provider should look for evidence that the attribute may be wrong, not only for evidence that it is right.