source_norm: CRA Annex I Part I (2)(c) — Schutz vor unbefugtem Zugriff

target_framework: OWASP ASVS

mapping_type: supports

mapping_status: candidate

rationale: Retriever-Top (score 1.197) fuer Authentifizierung/Zugriffskontrolle. V6=Auth — plausibel.


rationale: Retriever (score 1.194) fuer Authentifizierung/Zugriffskontrolle. V6=Auth — plausibel.


mapping_type: related

rationale: Retriever (score 1.190), aber V14=Config — schwacher Kandidat.


source_norm: CRA Annex I Part I (2)(d) — Vertraulichkeit / Verschluesselung

rationale: Retriever-Top (score 1.206), aber V14=Config statt V11=Crypto — wahrscheinlich FALSCH.


rationale: Retriever (score 1.146). Crypto gehoert zu V11.


rationale: Retriever (score 1.145). Crypto gehoert zu V11.


source_norm: CRA Annex I Part I (2)(e) — Integritaet

rationale: Retriever (score 1.202), V14.2.4 ueber-erscheint.


rationale: Retriever (score 1.166).


rationale: Retriever (score 1.159).


source_norm: CRA Annex I Part I (2)(k) — Sicherheitsrelevante Ereignisse / Logging

rationale: Retriever-Top (score 1.223) fuer Logging. V16=Logging — plausibel.


rationale: Retriever (score 1.196) fuer Logging. V16=Logging — plausibel.


rationale: Retriever (score 1.186) fuer Logging. V16=Logging — plausibel.


source_norm: CRA Annex I Part I (2)(l) — Sichere Updates

rationale: Schwacher Kandidat (score 1.141) — ASVS deckt sichere Updates kaum ab.


rationale: Schwacher Kandidat (score 1.138).


rationale: Schwacher Kandidat (score 1.129).


source_norm: CRA Annex I Part I (2)(i) — Angriffsflaeche minimieren

rationale: Schwacher Kandidat (score 1.162).


rationale: Schwacher Kandidat (score 1.136).