It's deliberately not prescriptive as the implementers are the ones best placed to solve for requirements - you don't want policy makers providing technical checklists. And it's not unstructured - ISO 42001 essentially encodes it.