Is this it?
Not entirely. This is this is the regulation, however, it excludes the AMCs (Acceptable Methods of Compliance) that will be published by EASA soon and will probably be somewhat longer. EASA is also able to make 'Decisions' that are legally binding as well to supplement the regulation.
The AMCs will add detail to the legal framework in then regulation. The rulemakers 'try' to simplify the regulation and put the details that are likely to change into MACs and Decisions because they are easier to change.