Clarified the number of elements

[CENT] </br> risk level is **medium** if:

- The product is intended for or foreseaably used to manage networks whose entity status is undefined.

- The product serves for a medium-sized enterprise.

- The managed element is widely used.

- or the number of managed elements is a thousand or over.

[CENT] </br> risk level is **high** if:

- The product is targeted important or essential entities.

This list of use cases is a resource for manufacturers to simplify the selection of a set of cybersecurity requirements.

Manufacturer's technical documentation may benefit from including or referring to these use cases and associated security profiles.

Manufacturer's technical documentation may benefit from including or referring to these use cases.

An NMS is a product controlling at least partially connected devices with network access. Despite its central positioning, an NMS can be an aggregate of several components, including but not limited to: end-to-end management systems, dedicated configuration management systems, or controllers for software-defined networking as described in chapter 1.2.

<mark>Editor’s Note: It is not adequate to normatively reference prEN 40000-1-2 (PT1) to fulfil this requirement.</mark>

* **CYB_GENERAL_1**: The product shall define whether a service is completed fulfilled by the product itself or expected to integrated into in operative environment.

* **CYB_GENERAL_1**: The product shall define whether a service is completely fulfilled by the product itself or expected to integrated into in operative environment.

* **CYB_GENERAL_2**: The product shall define where it relies on existense of external services.

* **CYB_GENERAL_3**: The product shall define how it dependent on RDPS.

* **CYB_RDPS_1**: Where the product relies on a remote data processing solution (RDPS) for the provision or support of one or more product functions, the product shall satisfy the applicable requirements specified in Annex R.