3.2.7 Knowledge of client’s business sector

Every evaluator involved in the evaluation of products with digital elements shall have knowledge of:

◦ information security risks related to business sector;

◦ generic terminology, processes and technologies related to the client’s business sector; ◦ as applicable, relevant business sector practices.

In addition, collectively, the evaluation team involved in the evaluation of products with digital elements shall have knowledge of the legal and regulatory requirements in the particular information security field, geography and jurisdictions(s).

NOTE : There needs to be a discussion about the relationship between “business sectors” and the “product categories” defined in the CRA. Harmonised standards will define risks, and they are likely to identify specific technical aspects and business practices specific to a business sector. A single business sector may correspond to several product categories ( e.g. , the semiconductor sector covers several product categories), so a good practice would be to list the CRA product categories covered by the business sector.

1. Pārskats

1.1 Atsauces

1.2 Identificētās prasības

1.3 Saistītie tiesību akti

2. Identificētās prasības

3. Saistītie tiesību akti

• ENISA -