The purpose of the regulation is harmonization so why is the regulation not more prescriptive?
Harmonization and prescription are different things. An assessment of the cyber security of a complex system (such as a road vehicle) does not lend itself to prescription unless one prescribes [...]