+3.3 Competences for preparing evaluations
---+3.3.1 Knowledge of common industry practices
---+3.3.2 Knowledge of information security terminology, principles, practices and
---+3.3.3 Knowledge of conformity assessment terminology, principles, practices and
---+3.3.4 Knowledge of specific standards and normative documents
---+3.3.5 Knowledge of conformity assessment body’s processes
---+3.3.6 Knowledge of client’s business sector
---+3.3.7 Knowledge of client products, processes and organisation

3.3 Competences for preparing evaluations

This section covers the competences of the personnel involved in the application review to determine the evaluation team competence required, to select the evaluation team members and to determine the evaluation time.

NOTE : These personnel may be involved in the performance of evaluations or not, but they need to have enough knowledge to understand how an evaluation is performed, the set of skills that will be required for a given evaluation and the time required to perform the evaluation However, this role does not require any operational skills on the performance of evaluation activities.

1. Oversigt

Titel	Standard
3.3.1 Knowledge of common industry practices	Personnel involved in the application review and evaluation preparation shall have knowledge of principles of cybersecurity.
3.3.2 Knowledge of information security terminology, principles, practices and	techniques Personnel involved in the application review and evaluation preparation shall have knowledge of ◦ cybersecurity specific terminology and documentation structures, hierarchy and interrelationships; ◦ vulnerability management processes.
3.3.3 Knowledge of conformity assessment terminology, principles, practices and	techniques Personnel involved in the application review and evaluation preparation shall have knowledge of: conformity assessment specific terminology and documentation structures, hierarchy and interrelationships.
3.3.4 Knowledge of specific standards and normative documents	Personnel involved in the application review and evaluation preparation shall have knowledge of relevant conformity assessment schemes, information security standards and other normative documents used in the conformity assessment process.
3.3.5 Knowledge of conformity assessment body’s processes	Personnel involved in the application review and evaluation preparation shall have knowledge of ◦ conformity assessment body general policies and processes, including information security policies and processes; ◦ as applicable, requirements of the conformity assessment schemes for which the CAB is authorised to work.
3.3.6 Knowledge of client’s business sector	Personnel involved in the application review and evaluation preparation shall have knowledge of generic terminology, processes and technologies related to the client’s business sector.
3.3.7 Knowledge of client products, processes and organisation	Personnel involved in the application review and evaluation preparation shall have knowledge of the impact of organization type, size, governance, structure, functions and relationships on the design, development and production of the product with digital elements.

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav
Kilde	Krav

3. Relaterede reguleringer

Reguleringer
Kilde	Regulering

ENISA -
EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.

DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.