1.1 Background

In line with DG.CNCT.H2 request 1 , this document is ENISA’s contribution on the competence requirements for the notified bodies that will be allowed to perform conformity assessment activities on behalf of the vendors of products with digital elements to demonstrate their compliance to the Cyber Resilience Act (CRA).

The notified bodies (NBs) should be assessed by the Notifying Authorities (NAs) and others bodies involved in the assessment, designation and monitoring of notified bodies. The conformity assessment bodies (CABs) wishing to be notified could use the accreditations against the preferred ISO 17000 series standards 2 in order to demonstrate the conformity with the requirements. In this case, National Accreditation Bodies (NABs) should be involved in the assessment and monitoring.

The Notifying Authorities will remain solely responsible for the all the processes: assessment, monitoring, designation and notification even they may delegate some of these functions to others bodies.

As the requirements for CABs wishing to be notified should be evaluated by the Notifying Authorities, the personnel for Notifying Authorities should have the knowledge, experience and training to assess all requirements for CABs wishing to be notified.

1. Ülevaade

1.1 Viited

1.2 Tuvastatud nõuded

1.3 Seotud regulatsioonid

2. Tuvastatud nõuded

3. Seotud regulatsioonid

• ENISA -