Added implementing regulation 2025/2392 changes

## 1.2 Products in scope

> NOTE: This section is a technical definition outside of the standards context. The definition will be later replaced with references to the official documentation when the work is done and approved.

The implementing regulation <a href="_ref_i.11">[i.11]</a> defines in section (2) that the core functionality of a product defines what category it should be evaluated under. The regulation continues to define in section (3), that when the product is a composite of other recognized products, the composite product doesn't inherit all other regulations, but is evaluated only in it's own category.

Products in scope include products whose core purpose is to serve as a network management systems intended to manage the network devices.

The present document applies to Network management systems Products with digital elements that manage IP-connected network elements, such as servers, routers, switches, workstations, printers or mobile devices, by tracking them and controlling their network configuration.

The NMS is defined in the implmenting regulation <a href="_ref_i.11">[i.11]</a> in Annex I, Class I (6) and is not restricted to only systems that are IP connected. The scope covers all connected elements in the network, that are somehow managed. This includes, but is not limited to, Mobilde Device Managent systems and Software Defined Networking.

This category includes but is not limited to end-to-end management systems and dedicated configuration management systems, such as controllers for software-defined networking.

The IP-connection may exclude other means of remote management, such as the management provisioning via Bluetooth which is common for consumer devices. Bluetooth consumer devices are usually not managed by an NMS, however, if they are capable, a NMS management could control them too, as Bluetooth is just a communication media and can be used also for management traffic. Such, NMS’s often control more than just network configuration - e.g., MDM systems.

Bluetooth consumer devices are usually not managed by an NMS, however, if they are capable, a NMS management could control them too, as Bluetooth is just a communication media and can be used also for management traffic. Such, NMS’s often control more than just network configuration - e.g., MDM systems.

## 1.3 Products not in scope

-   <span id="_ref_i.8"></span><a name="_ref_i.8">[i.8]</a> ETSI EN 304 627 \"Router, modems and switches\"

-   <span id="_ref_i.9"></span><a name="_ref_i.9">[i.9]</a> ETSI EN 304 642 \"Cybersecurity Requirements for Telecommunication Systems\"

-   <span id="_ref_i.10"></span><a name="_ref_i.10">[i.10]</a> [Mitre ATT&CK] framework

-   <span id="_ref_i.11"></span><a name="_ref_i.11">[i.11]</a> EU 2025/2392 Comission implementing regulation on the technical description of the categories of important and critical products with digital elements pursuant to Regulation EU 2024/2847 (CRA)

[Mitre ATT&CK]: (https://attack.mitre.org)