+3.2.4 Evaluation skills

3.2.4 Evaluation skills

Every evaluator involved in the evaluation of products with digital elements shall have technical skills, including as applicable:

◦ testing skills; ◦ inspection skills; ◦ auditing skills

Inspection skills shall be complemented as required by sufficient competences to form a professional judgment. In addition, every evaluator involved in the evaluation of products with digital elements shall have general skills, including:

◦ language skills; ◦ note-taking and report-writing skills; ◦ as applicable, presentation skills; ◦ as applicable, interviewing skills.

In addition, collectively, the evaluation team involved in the evaluation of products with digital elements shall have knowledge of testing and inspection skills.

NOTE : For Module H, at least one member of the evaluation team needs to have product-specific competencies, including an assessment of the deliverables provided by the manufacturer [9].

NOTE : For Module B, the periodic audits of the vulnerability handling processes used by the manufacturer is considered also covered by EN ISO/IEC 17065 without specific EN ISO/IEC 17021-1 competence [9].

Evaluation leads shall have a higher level of report-writing and presentation skills, in order to report the findings to the clients in written and oral forms.

NOTE : The description of the skills needs to be much more detailed, in particular for the technical skills related to product assessment (inspection and testing). This information is likely to be defined in (or easily derived from) harmonised standards. In the meantime, the competences will be linked to the evaluation methodology defined by the CAB to perform the evaluation.

1. Oversigt

Titel Standard

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav
Kilde Krav

3. Relaterede reguleringer

Reguleringer
Kilde Regulering
  • ENISA -

    EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.

    DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.