+2.2 Roles

2.2 Roles

The roles are directly inspired from the roles defined in the ISO/IEC 17000 series of standards:

  • An evaluator is member of the evaluation team, who will perform evaluation tasks.
  • A lead evaluator is the person who is responsible for the evaluation of a product.
  • An evaluation team is a team of persons in charge of the evaluation of a product, including one lead evaluator, one or more evaluators, and as required, additional members such as technical experts and observers.

NOTE : The lead evaluator may be the only evaluator in the evaluation team. NOTE : Technical experts do not need to demonstrate the competences of an evaluator, but they can only perform activities under the supervision of an evaluator.

The personnel preparing an evaluation is in charge for a given product or group of products to review the application, to determine the specific competences required for the evaluation team, to select the evaluation team members, and to determine the evaluation time.

NOTE : This role is usually endorsed by management personnel who interact with clients before the start of the evaluation.

The personnel reviewing reports and making certification decisions are in charge of ensuring that the evaluation has been performed according to the rules defined in the conformity assessment scheme.

NOTE : As per EN ISO/IEC 17065, the personnel reviewing reports must be independent from the evaluation team.

1. Oversigt

Titel Standard

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav
Kilde Krav

3. Relaterede reguleringer

Reguleringer
Kilde Regulering
  • ENISA -

    EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.

    DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.