3.4.2 Knowledge of information security terminology, principles, practices and

techniques

Personnel in charge of reviewing reports and making conformity assessment decisions shall have knowledge of:

◦ cybersecurity specific terminology and documentation structures, hierarchy and interrelationships; ◦ as applicable, cybersecurity aspects of the design and development of products with digital elements; ◦ as applicable and at least for reviews and decisions related to Module H conformity assessments, cybersecurity management related tools, methods, techniques and their application to the design, development and production of products with digital elements; ◦ common vulnerabilities, vulnerability identification and vulnerability management; ◦ cybersecurity risk assessment and risk management; ◦ as applicable and at least for reviews and decisions related to Module B conformity assessments, cryptographic mechanisms ◦ legal and regulatory requirements relevant to cybersecurity.

1. Pārskats

1.1 Atsauces

1.2 Identificētās prasības

1.3 Saistītie tiesību akti

2. Identificētās prasības

3. Saistītie tiesību akti

• ENISA -