eIDAS 2.0, Artikkel 30, DE
a security evaluation process carried out in accordance with one of the standards for the security assessment of information technology products included in the list established in accordance with the second subparagraph; or
a process other than the process referred to in point (a), provided that it uses comparable security levels and provided that the public or private body referred to in paragraph 1 notifies that process to the Commission. That process may be used only in the absence of standards referred to in point (a) or when a security evaluation process referred to in point (a) is ongoing.
The Commission shall, by means of implementing acts, establish a list of standards for the security assessment of information technology products referred to in point (a). Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).
1. Conformity of qualified electronic signature creation devices with the requirements laid down in Annex II shall be certified by appropriate public or private bodies designated by Member States.
2. Member States shall notify to the Commission the names and addresses of the public or private body referred to in paragraph 1. The Commission shall make that information available to Member States.
3. The certification referred to in paragraph 1 shall be based on one of the following: (a) a security evaluation process carried out in accordance with one of the standards for the security assessment of information technology products included in the list established in accordance with the second subparagraph; or
3a The validity of a certification referred to in paragraph 1 shall not exceed five years, provided that vulnerabilities assessments are carried out every two years. Where vulnerabilities are identified and not remedied, the certification shall be cancelled.
4. The Commission shall be empowered to adopt delegated acts in accordance with Article 47 concerning the establishment of specific criteria to be met by the designated bodies referred to in paragraph 1 of this Article.
Versjon: 3d5f69832d50e91f
SHA-256: sha256:3d5f69832d50e91f538dd7cb9346647fc4a09f9445db4e301b8997047960019f
- Artikkel 1
- Artikkel 2
- Artikkel 3
- Artikkel 4
- Artikkel 5
- Artikkel 5a
- Artikkel 5b
- Artikkel 5c
- Artikkel 5d
- Artikkel 5e
- Artikkel 5f
- Artikkel 6
- Artikkel 7
- Artikkel 8
- Artikkel 9
- Artikkel 10
- Artikkel 11
- Artikkel 11a
- Artikkel 12
- Artikkel 12a
- Artikkel 12b
- Artikkel 13
- Artikkel 14
- Artikkel 15
- Artikkel 16
- Artikkel 19a
- Artikkel 20
- Artikkel 21
- Artikkel 22
- Artikkel 23
- Artikkel 24
- Artikkel 24a
- Artikkel 25
- Artikkel 26
- Artikkel 27
- Artikkel 28
- Artikkel 29
- Artikkel 29a
- Artikkel 31
- Artikkel 32
- Artikkel 32a
- Artikkel 33
- Artikkel 34
- Artikkel 35
- Artikkel 36
- Artikkel 37
- Artikkel 38
- Artikkel 39
- Artikkel 39a
- Artikkel 40
- Artikkel 40a
- Artikkel 41
- Artikkel 42
- Artikkel 43
- Artikkel 44
- Artikkel 45
- Artikkel 45a
- Artikkel 45b
- Artikkel 45c
- Artikkel 45d
- Artikkel 45e
- Artikkel 45f
- Artikkel 45g
- Artikkel 45h
- Artikkel 45i
- Artikkel 45j
- Artikkel 45k
- Artikkel 45l
- Artikkel 46
- Artikkel 46a
- Artikkel 46b
- Artikkel 46c
- Artikkel 46d
- Artikkel 46e
- Artikkel 47
- Artikkel 48
- Artikkel 48a
- Artikkel 49
- Artikkel 50
- Artikkel 51
- Artikkel 52
Source: NovaCopilot