Commit e27e4965 authored by Santeri Toikka's avatar Santeri Toikka
Browse files

Added reference to CYB_OPS-3 

Closes #501
parent deb8c680

EN-304-621.md

+1 −1
Original line number Diff line number Diff line
@@ -1179,7 +1179,7 @@ For **high** risk: 
### 5.2.2 Operative environment:



* **CYB_OPS-1** The product shall describe the core requirements and expectations for the operational environment (OE).

* **CYB_OPS-2** The product shall describe the traffic related to the product operation, including but not limited to configuration, metrics and API access, is addressed as Application level traffic as per RFC 1122.

* **CYB_OPS-2** The product shall describe the traffic related to the product operation, including but not limited to configuration, metrics and API access, that is addressed as Application-level traffic as per [2], RFC 1122.

* **CYB_OPS-3** Where the product relies on a remote data processing solution (RDPS) for the provision or support of one or more product functions, the product shall satisfy the applicable requirements specified in [Annex R](#annex-r-normative-additional-provisions-for-products-relying-on-remote-data-processing-solutions-rdps).



[Annex R](#annex-r-normative-additional-provisions-for-products-relying-on-remote-data-processing-solutions-rdps) specifies supplementary requirements for the product-facing RDPS boundary and does not replace the requirements applicable to the product function as such.