+3.3 Competences for preparing evaluations
---+3.3.1 Knowledge of common industry practices
---+3.3.2 Knowledge of information security terminology, principles, practices and
---+3.3.3 Knowledge of conformity assessment terminology, principles, practices and
---+3.3.4 Knowledge of specific standards and normative documents
---+3.3.5 Knowledge of conformity assessment body’s processes
---+3.3.6 Knowledge of client’s business sector
---+3.3.7 Knowledge of client products, processes and organisation

3.3 Competences for preparing evaluations

This section covers the competences of the personnel involved in the application review to determine the evaluation team competence required, to select the evaluation team members and to determine the evaluation time.

NOTE : These personnel may be involved in the performance of evaluations or not, but they need to have enough knowledge to understand how an evaluation is performed, the set of skills that will be required for a given evaluation and the time required to perform the evaluation However, this role does not require any operational skills on the performance of evaluation activities.

1. Prezentare generală

3.3.1 Knowledge of common industry practices

Personnel involved in the application review and evaluation preparation shall have knowledge of principles of cybersecurity.
3.3.2 Knowledge of information security terminology, principles, practices and

techniques

Personnel involved in the application review and evaluation preparation shall have knowledge of

◦ cybersecurity specific terminology and documentation structures, hierarchy and interrelationships; ◦ vulnerability management processes.
3.3.3 Knowledge of conformity assessment terminology, principles, practices and

techniques

Personnel involved in the application review and evaluation preparation shall have knowledge of: conformity assessment specific terminology and documentation structures, hierarchy and interrelationships.
3.3.4 Knowledge of specific standards and normative documents

Personnel involved in the application review and evaluation preparation shall have knowledge of relevant conformity assessment schemes, information security standards and other normative documents used in the conformity assessment process.
3.3.5 Knowledge of conformity assessment body’s processes

Personnel involved in the application review and evaluation preparation shall have knowledge of

◦ conformity assessment body general policies and processes, including information security policies and processes; ◦ as applicable, requirements of the conformity assessment schemes for which the CAB is authorised to work.
3.3.6 Knowledge of client’s business sector

Personnel involved in the application review and evaluation preparation shall have knowledge of generic terminology, processes and technologies related to the client’s business sector.
3.3.7 Knowledge of client products, processes and organisation

Personnel involved in the application review and evaluation preparation shall have knowledge of the impact of organization type, size, governance, structure, functions and relationships on the design, development and production of the product with digital elements.

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe

3. Reglementări asociate

Reglementări