Skip to main content

Clause 2 — Normative references

Clause 2 lists normative references indispensable for applying FprEN 40000-1-2:2026. The primary normative reference cited is FprEN 40000-1-1:2026 (Cybersecurity requirements for products with digital elements - Part 1-1: Vocabulary).

What Clause 2 requires​

Manufacturers must interpret all terms and requirements in FprEN 40000-1-2 using the definitions set out in FprEN 40000-1-1. When referenced documents are dated, only the specific edition applies. When undated, the latest edition (including amendments) applies.

How CVD Portal supports compliance​

CVD Portal enforces consistent, standardized terminology across all compliance artifacts and features:

  • Standardized data models: Reports are scored with CVSS 3.1 or CVSS 4.0. Advisories use the OASIS CSAF 2.0 format.
  • Audit-ready documentation: Exported technical files and control registers maintain precise references to normative standards, preventing semantic ambiguity during external audits or notified body reviews.