Commit 28fb4044 authored by Valerie Aurora (Bow Shock)'s avatar Valerie Aurora (Bow Shock)
Browse files

Emphasize that not all mitigations are required for all use cases

parent 49c56fd0

EN-304-626.md

+2 −2
Original line number Diff line number Diff line
@@ -607,7 +607,7 @@ Some risks may be transferred partially or fully to other components of the fina 


This section is a list of technical requirements necessary to satisfy the CRA essential requirements. Each technical requirement can be satisfied by one or more potential mitigations. Each mitigation may or may not be appropriate for an individual use case. The following section will define which mitigations will be required, depending on risk factors and/or a use case.



See Section 5.3 for tables which map mitigations to security profiles and Annex C for additional information.

**NOT ALL MITIGATIONS ARE NECESSARY FOR ALL USE CASES.** See Section 5.3 for the mappings of security profiles to mitigations and Annex C for additional information.



### 5.2.2 TR-NKEV: No known exploitable vulnerabilities at first use