What cybersecurity evidence should a medical device premarket submission contain?

“The evidence should be scaled to the device's cybersecurity risk and submission type. Depending on applicability, it can include security risk-management documentation, threat modeling, architecture views, security requirements and traceability, cybersecurity testing, unresolved anomaly assessment, an SBOM, labeling, and plans for vulnerability monitoring, coordinated disclosure, updates, and patches.”