3.4.2 Knowledge of information security terminology, principles, practices and

techniques

Personnel in charge of reviewing reports and making conformity assessment decisions shall have knowledge of:

◦ cybersecurity specific terminology and documentation structures, hierarchy and interrelationships; ◦ as applicable, cybersecurity aspects of the design and development of products with digital elements; ◦ as applicable and at least for reviews and decisions related to Module H conformity assessments, cybersecurity management related tools, methods, techniques and their application to the design, development and production of products with digital elements; ◦ common vulnerabilities, vulnerability identification and vulnerability management; ◦ cybersecurity risk assessment and risk management; ◦ as applicable and at least for reviews and decisions related to Module B conformity assessments, cryptographic mechanisms ◦ legal and regulatory requirements relevant to cybersecurity.

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

3. Regolamenti relatati

• ENISA -