3.2.5 Knowledge of specific standards and normative documents

Every evaluator involved in the evaluation of products with digital elements shall have knowledge of:

◦ relevant conformity assessment schemes, information security standards and other normative documents used in the conformity assessment process;

NOTE : This is general knowledge, required for all evaluators, and the more specific knowledge of the requirements and methodologies are only required for the evaluation team.

In addition, collectively, the evaluation team involved in the evaluation of products with digital elements shall have knowledge of

◦ relevant cybersecurity requirements, as defined in schemes, standards and other normative documents; ◦ relevant cybersecurity evaluation methodologies, as defined in schemes, standards and other normative documents

NOTE : Harmonised standards are expected to provide a reference framework, from which more detailed requirements and activities will be derived. Before the availability of these harmonised standards, ENISA and the JRC have identified a set of standards that may be of interest [10].

1. Resumen

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

3. Regulaciones relacionadas

• ENISA -