Requirements
This page brings together the 1123 requirements of the 14 requirement documents in the release. Each document has its own list, with every requirement on its own anchor, its PDF page and the requirements that refer to it. The search below also includes the requirements of the OWASP MAS EUDI Wallet profile, an external requirement set that the cybersecurity certification uses. Use it to filter across all of them. Click an ID to open the requirement in its list.
The requirements of the scheme documents were extracted automatically and then checked against the PDFs. The PDF is authoritative: every requirement links to the page it is on. The complete set is available as JSON and CSV.
Loading the requirements…
Requirement documents
| Document | What its requirements are |
|---|---|
| NL-FS-W | Implementation Conformance Statement (ICS) items for a Wallet Solution, each Required, Recommended or Optional |
| NL-FS-P | ICS items for a PID issuance service |
| NL-CS Part 3 | The evidence an evaluation laboratory checks (E1–E15) |
| NL-CS Part 4 | Audit criteria for the operational processes behind the Wallet Instance |
| NL-CS-WI | Functional (FSR) and resilience (RSR) security requirements for the Wallet Instance |
| NL-CS-WI conditions | Conditions on the underlying mobile system (SC-01 to SC-12) |
| NL-CS-WSCA | Common Criteria security functional requirements (SFRs) for the WSCA |
| NL-CS-WSCA conditions | Conditions for the platform underneath the WSCA |
| NL-P-01 | Organisational and technical requirements for Wallet Providers and PID Providers |
| NL-P-02 | Cybersecurity controls for essential entities |
| NL-P-03 | Secure software development and vulnerability management requirements |
| NL-P-04W | Wallet onboarding and lifecycle management requirements for Wallet Providers |
| NL-P-04P Part 1 | PID issuance and lifecycle management requirements for PID Providers |
| NL-P-04P Part 2 | PID revocation, expiry and deletion requirements for PID Providers |
External requirement sets
| Set | What its requirements are |
|---|---|
| OWASP MAS EUDI Wallet profile | The wallet-specific OWASP Mobile Application Security requirements. NL-CS Part 1 §4.4 builds the required test set of the cybersecurity certification on OWASP MAS, with this profile "applied on top". Published by OWASP, not part of the Dutch scheme documents. |
The documents also rely on other standards and frameworks, such as CyberFundamentals, the ECCG Agreed Cryptographic Mechanisms and ETSI TS 119 472. These are listed with links to their official sources under external sources.
The other documents (the system framework, NL-TL, NL-FS, NL-CS Parts 1 and 2, NL-P-W and NL-P-P) have no requirement list on this site. Their content is explained on their document pages and in how the system works.