Requirement

One individual obligation inside a framework. This is the level that gets mapped to control objectives.

Belongs to one framework. Met by many control objectives.

Fields

Field	Type	Meaning	Example 1	Example 2
number	autonumber	Unique identifier	REQ-014	REQ-102
framework	reference to x_irm_framework	Parent framework	FRM-001	FRM-002
reference	string	Clause or article number	Annex A 8.13	Article 32
summary	text	Customer's own paraphrase of the obligation	Keep backup copies of information and systems, and test them	Apply security measures appropriate to the risk to personal data
applicability	choice	Whether it applies, with a reason if not	Applicable	Applicable