@@ -1522,7 +1522,9 @@ Management traffic in this context refers to command and control instructions th
This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 Part 1 (2) (j).
***MAS_TECH-1** The product shall be shipped without undocumented interfaces.
***MAS_TECH-1** All communication interfaces of the product shall be documented;
* the product shall not expose interfaces or initiate connections other than those documented;
* interfaces not required for the intended use shall be disabled by default.
***MAS_TECH-2** The product shall not connect to undocumented RDPS services.
## 5.13 Exploit mitigation
@@ -1558,7 +1560,7 @@ The logging requirements in this subclause define baseline event recording and a
For **low** risk:
***MON_LOG-1** The log data of events shall be protected from unauthorised access.
***MON_LOG-2** The log data of events shall be protected from modification including their deletion.
***MON_LOG-2** The log data of events shall be protected from modification including their deletion, execpt if the modification relates to an execution of planned rotation policy in the product.
***MON_LOG-3** The log data of events shall be confidentiality protected.
***MON_LOG-4** The log information shall include the following fields in a machine readable format including, but not limited to:
