Analysis of how SbD-ToE responds to the obligations of Regulation (EU) 2024/1689 (AI Act) - cybersecurity, record-keeping, human oversight, transparency, post-market monitoring and serious incidents of AI systems, with accuracy and robustness pending a future round
The Manual's requirements that apply under context CTX-NIS2, by level and grade, with each floor that the regime elevates and its legal basis.
The Manual's requirements that apply under context CTX-DORA, by level and grade, with each floor that the regime elevates and its legal basis.
The Manual's requirements that apply under context CTX-AIA-RE, by level and grade, with each floor that the regime elevates and its legal basis.
The Manual's requirements that apply under context CTX-RGPD, by level and grade, with each floor that the regime elevates and its legal basis.
The Manual's requirements that apply under context CTX-CRA, by level and grade, with each floor that the regime elevates and its legal basis.
What the Manual covers, the declared gaps and what stays out of scope, from the coverage matrix of the Cybersecurity Act (CSA).
Analysis of how SbD-ToE supports the technical core of the Cyber Resilience Act in the context of products with digital elements, with explicit conformity boundaries
Analysis of how SbD-ToE covers the technical requirements of Regulation (EU) 2022/2554 (DORA)
How SbD-ToE covers the technical requirements of the GDPR (EU 2016/679)
Framing of the normative analysis chapter, which shows how SbD-ToE intersects with different normative instruments and regulations
What SbD-ToE covers, the gaps it declares and what it leaves out of scope against the NIS2 Directive (EU 2022/2555)