Updated evidence collection and added missing objectives to assessments

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

### 6.6.7 AAC_AUTH-7

**Objective:**   

**Preparation:**

**Objective:** Ensure confidentiality of the IAM.  

1. Have the product initialised and available with the default configuration and required credentials;

2. Study the technical documentation how to interact with the system;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

### 6.6.8 AAC_AUTH-8

**Objective:**   

**Objective:** Ensure auditability of the system.  

**Preparation:**

1. Have the product initialised and available with the default configuration and required credentials;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

### 6.6.10 AAC_AUTH-9

**Objective:**   

**Objective:** Ensure privileged action correctens a the time of the execution.  

**Preparation:**

1. Have the product initialised and available with the default configuration and required credentials;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

### 6.6.11 AAC_AUTH-10

**Objective:**   

**Objective:** Ensure auditability of the system.  

**Preparation:**

1. Have the product initialised and available with the default configuration and required credentials;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

### 6.6.12 AAC_AUTH-11

**Objective:**   

**Objective:** Ensure auditability of the system.  

**Preparation:**

1. Have the product initialised and available with the default configuration and required credentials;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

### 6.6.1.1 AAC_MACHINE-1

**Objective:**   

**Objective:** Make pre-shared keys and fixed passwords obsolete.  

**Preparation:**

1. Have the product initialised and available with the default configuration and required credentials;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

### 6.6.1.2 AAC_MACHINE-2

**Objective:**   

**Objective:** Prevent general super user access rights for M2M traffic IAM.  

**Preparation:**

1. Have the product initialised and available with the default configuration and required credentials;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

**Supporting Evidence:**

* Metrics output showing detected system or managed element crash or restart with the reported cause;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;

* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;