update Section 2 and 3

## 2.1 Normative references

**_Editor's Note_: _This Section Needs To Be Updated_**

> **In Harmonised Standards these references shall be specific** (identified by date of publication and/or edition number or version number) **publicly available and in English, except in exceptional circumstances making sure that impacts have been evaluated and explanations have been given on how any negative implications should be avoided** . See clauses 2.10.1 and 8.4 of the [EDRs](EDRs) and the communiqué on "[References in ETSI Deliverables](https://portal.etsi.org/Portals/0/TBpages/edithelp/Docs/News_from_editHelp/References_in_ETSI_deliverables.pdf)".

>

> Guidance for selecting normative references in harmonised standards is given in clause 2.8.3 of the Vademecum on European standardisation. Please **systematically consult with your Technical Officer** for the latest guidance on normative references other than to ENs, ISO/IEC standards, notably to prevent the risk of non-acceptance.

## 2.2 Informative references

**_Editor's Note_: _This Section Needs To Be Updated_**

References are either specific (identified by date of publication and/or edition number or version number) or nonspecific. For specific references, only the cited version applies. For non-specific references, the latest version of the referenced document (including any amendments) applies.

> NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee their long-term validity.

# 3 Definition of terms, symbols and abbreviations

**_Editor's Note_: _This Section Needs To Be Updated_**

> **NOTE: Existing ETSI terms and abbrevations can be searched here: [https://webapp.etsi.org/Teddi/](https://webapp.etsi.org/Teddi/)**

## 3.1 Terms

This clause provides terms and definitions based on CEN/CLC JTC13 WG09's <a href="#_ref_i.6">[i.6]</a> work on terms and definitions, terms and definitions provided by ETSI EN 303 645/TS 103 701 <a href="#_ref_i.3">[i.3]</a> and by CEN/CLC EN 18031 <a href="#_ref_i.5">[i.5]</a> series, and informed by terms used in the Common Criteria <a href="#_ref_i.7">[i.7]</a> and the NIAP Operating System Protection Plan <a href="#_ref_i.8">[i.8]</a>guide.

For the purposes of the present document, the following terms apply:

For the purposes of the present document, the following terms apply.

**Operating System (OS)** is defined in European Commission Implementing Act 2025/2392.

_Editor's Note_: _The definition of Operating System is copied below for reference._

> Software products with digital elements that provide an abstract interface of the underlying hardware and control the execution of software, and that may provide services such as computing resource management and configuration, scheduling, input-output control, managing data, and providing an interface through which applications interact with system resources and peripherals.

> This category includes but is not limited to real-time operating systems, general-purpose and special-purpose operating systems.

**Operating System (OS):** software products with digital elements that provide an abstract interface of the underlying hardware and control the execution of software, and that may provide services such as computing resource management and configuration, scheduling, input-output control, managing data, and providing an interface through which applications interact with system resources and peripherals

**General Purpose Operating System:** class of operating system designed to support a wide variety of workloads consisting of concurrent applications or services

**principle of least privilege:** design principle requiring that users, processes, and interfaces are granted only the minimum level of permission necessary to perform their legitimate functions, and nothing more

> FIXME: define "Platform"

## 3.2 Symbols

Void.

## 3.3 Abbreviations