+3.2.7 Knowledge of client’s business sector

3.2.7 Knowledge of client’s business sector

Every evaluator involved in the evaluation of products with digital elements shall have knowledge of:

◦ information security risks related to business sector;

◦ generic terminology, processes and technologies related to the client’s business sector; ◦ as applicable, relevant business sector practices.

In addition, collectively, the evaluation team involved in the evaluation of products with digital elements shall have knowledge of the legal and regulatory requirements in the particular information security field, geography and jurisdictions(s).

NOTE : There needs to be a discussion about the relationship between “business sectors” and the “product categories” defined in the CRA. Harmonised standards will define risks, and they are likely to identify specific technical aspects and business practices specific to a business sector. A single business sector may correspond to several product categories ( e.g. , the semiconductor sector covers several product categories), so a good practice would be to list the CRA product categories covered by the business sector.

1. Přehled

Název Standard

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky
Zdroj Požadavek

3. Související regulace

Regulace
Zdroj Regulace
  • ENISA -

    EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.

    DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.