Loading EN-304-625.md +339 −15 Original line number Diff line number Diff line Loading @@ -906,7 +906,27 @@ All cybersecurity-relevant parts of the product shall implement methods to valid #### 5.2.2.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: not required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required ## 5.3 No known exploitable vulnerabilities Loading @@ -929,7 +949,27 @@ The product shall have no known exploitable vulnerabilities at the time of place #### 5.3.2.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required #### 5.3.2.3 Guidance Loading Loading @@ -982,7 +1022,27 @@ All debug or management interfaces accessible to unauthorized users shall be pro #### 5.4.3.2 Applicability TODO * UC-VI-ISO: required * UC-PH-VNI: required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: not required * UC-VI-VMC: not required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: not required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: not required * UC-PH-STA: not required #### 5.4.3.3 Guidance Loading @@ -1004,6 +1064,28 @@ The product shall provide provide a method of securely updating the product via TODO - how to express no need to update? * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: not required * UC-PH-IOT: not required * UC-PH-IRO: not required * UC-PH-EDG: not required * UC-PH-HRO: not required * UC-PH-ISP: not required * UC-VI-VDC: not required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: not required * UC-PH-SMW: not required * UC-PH-SME: not required * UC-PH-ATM: not required * UC-PH-SPI: not required * UC-VI-VPN: required * UC-PH-MOB: not required * UC-PH-GPI: not required * UC-PH-USB: required * UC-PH-STA: required ## 5.6 Authentication and access control ### 5.6.1 Overview Loading @@ -1018,7 +1100,27 @@ The product shall provide methods by which the operational environment may imple #### 5.6.2.2 Applicability TODO * UC-VI-ISO: required * UC-PH-VNI: required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required #### 5.6.2.3 Guidance Loading @@ -1040,7 +1142,27 @@ The product shall provide methods by which the operational environment may prote #### 5.7.2.2 Applicability TODO * UC-VI-ISO: required * UC-PH-VNI: required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required #### 5.7.2.3 Guidance Loading @@ -1060,7 +1182,28 @@ The product shall provide methods by which the operational environment may prote #### 5.8.2.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required #### 5.8.2.3 Guidance Loading @@ -1080,7 +1223,27 @@ The product shall minimize the data processing by the product. #### 5.9.2.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: required * UC-PH-IOT: not required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required ## 5.10 Availability protection Loading Loading @@ -1110,7 +1273,27 @@ The product shall manage internal resource usage by data received over the netwo #### 5.10.3.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-IOT: REQ-AP-02 or REQ-AP-03 * UC-PH-IRO: REQ-AP-02 or REQ-AP-03 * UC-PH-EDG: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-HRO: REQ-AP-02 or REQ-AP-03 * UC-PH-ISP: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-VI-VDC: REQ-AP-02 or REQ-AP-03 * UC-VI-VMW: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-VI-VMC: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-VI-VII: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-SMW: REQ-AP-02 or REQ-AP-03 * UC-PH-SME: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-ATM: REQ-AP-02 or REQ-AP-03 * UC-PH-SPI: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-VI-VPN: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-MOB: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-GPI: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-USB: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-STA: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 ### 5.10.4 REQ-AP-03 (MI-DOST-1) Availability protection provided by operational environment Loading @@ -1130,7 +1313,27 @@ The product shall implement a mechanism to notify the host system when it detect #### 5.10.5.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: not required * UC-PH-IOT: not required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required ### 5.10.6 REQ-AP-05 (MI-WDOG): Watchdog and self-initiated reset Loading @@ -1140,7 +1343,27 @@ The product shall implement a mechanism to trigger an automatic reset when it de #### 5.10.6.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: not required * UC-PH-IOT: not required * UC-PH-IRO: not required * UC-PH-EDG: required * UC-PH-HRO: not required * UC-PH-ISP: not required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: not required * UC-PH-SME: not required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required ## 5.11 Non-interference Loading @@ -1156,7 +1379,27 @@ The product shall minimise the data originating from the product itself that is #### 5.11.2.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required #### 5.11.2.3 Guidance Loading @@ -1178,7 +1421,27 @@ Exposure of interfaces on the product shall be minimised in its secure-by-defaul #### 5.12.2.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: not required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required ## 5.13 Exploit mitigation Loading Loading @@ -1209,7 +1472,27 @@ The product shall record cybersecurity-relevant internal events, including but n #### 5.14.2.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required ## 5.15 Factory reset and data portability Loading @@ -1232,7 +1515,27 @@ The product shall automatically delete all user data and settings and restore to This requirement applies to products with the capability for the user to write data and/or settings that fall within the following use cases: TODO * UC-VI-ISO: required * UC-PH-VNI: required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required ### 5.15.3 REQ-SDT-02 (MI-SDRF) Secure data read provided by operational environment Loading @@ -1244,7 +1547,27 @@ The product shall provide a method by which an authorized user can securely read This requirement applies to products with the capability for the user to write data and/or settings that fall within the following use cases: TODO * UC-VI-ISO: required * UC-PH-VNI: required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required # 6 Conformity Assessment Loading Loading @@ -2712,6 +3035,7 @@ For each risk untreated by the product itself in each applicable use case, a cor * REQ-AP-03 (MI-DOST-1) Availability protection provided by operational environment * REQ-DRT-03 (MI-SDRF) Secure data read from product # Annex K (normative): Generic cryptographic requirements and assessment ## K.0 General Loading Loading
EN-304-625.md +339 −15 Original line number Diff line number Diff line Loading @@ -906,7 +906,27 @@ All cybersecurity-relevant parts of the product shall implement methods to valid #### 5.2.2.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: not required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required ## 5.3 No known exploitable vulnerabilities Loading @@ -929,7 +949,27 @@ The product shall have no known exploitable vulnerabilities at the time of place #### 5.3.2.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required #### 5.3.2.3 Guidance Loading Loading @@ -982,7 +1022,27 @@ All debug or management interfaces accessible to unauthorized users shall be pro #### 5.4.3.2 Applicability TODO * UC-VI-ISO: required * UC-PH-VNI: required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: not required * UC-VI-VMC: not required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: not required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: not required * UC-PH-STA: not required #### 5.4.3.3 Guidance Loading @@ -1004,6 +1064,28 @@ The product shall provide provide a method of securely updating the product via TODO - how to express no need to update? * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: not required * UC-PH-IOT: not required * UC-PH-IRO: not required * UC-PH-EDG: not required * UC-PH-HRO: not required * UC-PH-ISP: not required * UC-VI-VDC: not required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: not required * UC-PH-SMW: not required * UC-PH-SME: not required * UC-PH-ATM: not required * UC-PH-SPI: not required * UC-VI-VPN: required * UC-PH-MOB: not required * UC-PH-GPI: not required * UC-PH-USB: required * UC-PH-STA: required ## 5.6 Authentication and access control ### 5.6.1 Overview Loading @@ -1018,7 +1100,27 @@ The product shall provide methods by which the operational environment may imple #### 5.6.2.2 Applicability TODO * UC-VI-ISO: required * UC-PH-VNI: required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required #### 5.6.2.3 Guidance Loading @@ -1040,7 +1142,27 @@ The product shall provide methods by which the operational environment may prote #### 5.7.2.2 Applicability TODO * UC-VI-ISO: required * UC-PH-VNI: required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required #### 5.7.2.3 Guidance Loading @@ -1060,7 +1182,28 @@ The product shall provide methods by which the operational environment may prote #### 5.8.2.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required #### 5.8.2.3 Guidance Loading @@ -1080,7 +1223,27 @@ The product shall minimize the data processing by the product. #### 5.9.2.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: required * UC-PH-IOT: not required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required ## 5.10 Availability protection Loading Loading @@ -1110,7 +1273,27 @@ The product shall manage internal resource usage by data received over the netwo #### 5.10.3.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-IOT: REQ-AP-02 or REQ-AP-03 * UC-PH-IRO: REQ-AP-02 or REQ-AP-03 * UC-PH-EDG: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-HRO: REQ-AP-02 or REQ-AP-03 * UC-PH-ISP: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-VI-VDC: REQ-AP-02 or REQ-AP-03 * UC-VI-VMW: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-VI-VMC: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-VI-VII: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-SMW: REQ-AP-02 or REQ-AP-03 * UC-PH-SME: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-ATM: REQ-AP-02 or REQ-AP-03 * UC-PH-SPI: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-VI-VPN: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-MOB: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-GPI: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-USB: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 * UC-PH-STA: (REQ-AP-01 and REQ-AP-02) or REQ-AP-03 ### 5.10.4 REQ-AP-03 (MI-DOST-1) Availability protection provided by operational environment Loading @@ -1130,7 +1313,27 @@ The product shall implement a mechanism to notify the host system when it detect #### 5.10.5.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: not required * UC-PH-IOT: not required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required ### 5.10.6 REQ-AP-05 (MI-WDOG): Watchdog and self-initiated reset Loading @@ -1140,7 +1343,27 @@ The product shall implement a mechanism to trigger an automatic reset when it de #### 5.10.6.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: not required * UC-PH-IOT: not required * UC-PH-IRO: not required * UC-PH-EDG: required * UC-PH-HRO: not required * UC-PH-ISP: not required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: not required * UC-PH-SME: not required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required ## 5.11 Non-interference Loading @@ -1156,7 +1379,27 @@ The product shall minimise the data originating from the product itself that is #### 5.11.2.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required #### 5.11.2.3 Guidance Loading @@ -1178,7 +1421,27 @@ Exposure of interfaces on the product shall be minimised in its secure-by-defaul #### 5.12.2.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: not required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required ## 5.13 Exploit mitigation Loading Loading @@ -1209,7 +1472,27 @@ The product shall record cybersecurity-relevant internal events, including but n #### 5.14.2.2 Applicability TODO * UC-VI-ISO: not required * UC-PH-VNI: not required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required ## 5.15 Factory reset and data portability Loading @@ -1232,7 +1515,27 @@ The product shall automatically delete all user data and settings and restore to This requirement applies to products with the capability for the user to write data and/or settings that fall within the following use cases: TODO * UC-VI-ISO: required * UC-PH-VNI: required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required ### 5.15.3 REQ-SDT-02 (MI-SDRF) Secure data read provided by operational environment Loading @@ -1244,7 +1547,27 @@ The product shall provide a method by which an authorized user can securely read This requirement applies to products with the capability for the user to write data and/or settings that fall within the following use cases: TODO * UC-VI-ISO: required * UC-PH-VNI: required * UC-PH-VNC: required * UC-PH-IOT: required * UC-PH-IRO: required * UC-PH-EDG: required * UC-PH-HRO: required * UC-PH-ISP: required * UC-VI-VDC: required * UC-VI-VMW: required * UC-VI-VMC: required * UC-VI-VII: required * UC-PH-SMW: required * UC-PH-SME: required * UC-PH-ATM: required * UC-PH-SPI: required * UC-VI-VPN: required * UC-PH-MOB: required * UC-PH-GPI: required * UC-PH-USB: required * UC-PH-STA: required # 6 Conformity Assessment Loading Loading @@ -2712,6 +3035,7 @@ For each risk untreated by the product itself in each applicable use case, a cor * REQ-AP-03 (MI-DOST-1) Availability protection provided by operational environment * REQ-DRT-03 (MI-SDRF) Secure data read from product # Annex K (normative): Generic cryptographic requirements and assessment ## K.0 General Loading
