Security and evidence
These pages are for everyone at the operator who is responsible for information security, purchasing and audits: information security officers, purchasing when it assesses a supplier, and auditors who want to see evidence. They show what the manufacturer states about the product, which of the operator's duties the administration app handles day to day, and which report or view proves it.
None of these pages is a statement of conformity. Whether a deployment meets the requirements of a law or a standard is for the operator to assess for the whole deployment, which includes servers, network, databases and organization.
| You want to … | Page |
|---|---|
| look up the manufacturer's information under the Cyber Resilience Act | Product and security information under CRA Annex II |
| show how the app supports the measures of the NIS2 Directive | NIS2 evidence guide for operators |
| assess the manufacturer as a supplier | Supplier fact sheet |
| prepare for an audit | Example audit: questions and evidence |
| map the features to your ISMS | Mapping to ISO/IEC 27001:2022 and BSI IT-Grundschutz |
Related topics
- WKL Database Gateway Manager and VBA class: overview, section “Operator tasks the administration app covers”
en/wiki/data-conectivity/database-gateway/admin/security-and-evidence/start.txt · Last modified: by Wolfgang van der Stille