3.4.2 Knowledge of information security terminology, principles, practices and

techniques

Personnel in charge of reviewing reports and making conformity assessment decisions shall have knowledge of:

◦ cybersecurity specific terminology and documentation structures, hierarchy and interrelationships; ◦ as applicable, cybersecurity aspects of the design and development of products with digital elements; ◦ as applicable and at least for reviews and decisions related to Module H conformity assessments, cybersecurity management related tools, methods, techniques and their application to the design, development and production of products with digital elements; ◦ common vulnerabilities, vulnerability identification and vulnerability management; ◦ cybersecurity risk assessment and risk management; ◦ as applicable and at least for reviews and decisions related to Module B conformity assessments, cryptographic mechanisms ◦ legal and regulatory requirements relevant to cybersecurity.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

3. Zugehörige Regulierungen

• ENISA -