@@ -1718,7 +1718,7 @@ For each cybersecurity requirements defined in clause 5, the following clauses s
#### 6.2.1.1 CYB_GENERAL-1
**Objective:** Product dependencies to external services and systems are documented and understood.
**Objective:** Product functionalities, interface operations and interactions with external services are documented and understood.
**Preparation:**
@@ -1729,16 +1729,19 @@ For each cybersecurity requirements defined in clause 5, the following clauses s
1. Study the technical documentation.
2. Cross-reference the documentation to the system operation.
3. Monitor the network traffic and capture all targets the system is trying to initiate a connection with.
4. Operate at least a sample selection of the product’s most comprehensive or complex core functions for the managing of the external elements to verify its functional correctness.
**Verdict:**
1. Pass if product dependencies or external systems are named and their purpose and provisions are described
2. and the services or external systems are clearly expressed as part of the architecture description
3. and the monitored network traffic targets match the documentation.
4. Fail otherwise.
4. and the sample selection of core functions operated and resulted in what is claimed.
5. Fail otherwise.
**Supporting Evidence:**
* Screenshots of the conduct and results, before and after operation of the core functions.
* References to the documentation sections.
* Listing of discovered targets and an explanation of those targets.
