|
+2.1 Regulation |
2.1 RegulationArticle 39 of the CRA defines the requirements relating to notified bodies, and paragraph 7 focuses on the competences of the personnel: 7.The personnel responsible for carrying out conformity assessment activities shall have the following: (a) sound technical and vocational training covering all the conformity assessment activities in relation to which the conformity assessment body has been notified; (b) satisfactory knowledge of the requirements of the assessments they carry out and adequate authority to carry out those assessments; (c) appropriate knowledge and understanding of the essential cybersecurity requirements set out in Annex I, of the applicable harmonised standards and common specifications, and of the relevant provisions of Union harmonisation legislation and implementing acts; (d) the ability to draw up certificates, records and reports demonstrating that assessments have been carried out. These requirements are a basis, but they need to be interpreted in the light of the competence requirements defined in the 17000 family of standards. The ISO/IEC 17000 series of standards also provides a means of assessing compliance with the generic requirements for all sectors. However, accreditation under the ISO/IEC 17000 series or equivalent is neither required nor necessarily sufficient to justify designation as a notified body under CRA, as the requirements have to be defined by the notifying authority in each Member State. Nevertheless, the aim of the present document is to define competence requirements that can be used by Notifying Authorities and National Accreditation Bodies across the EU with the objective to harmonise the practices across Member States. 1. Visão geral
1.1 Referências1.2 Requisitos identificados1.3 Regulamentos relacionados2. Requisitos identificados
3. Regulamentos relacionados
|