CYRENE_Report 3_Conformity Evaluation Process & Multi Level Evidence Driven Supply Chain Risk Assessment

This report presents the proposal of an enhanced Risk and Conformity Assessment (RCA) methodology that combines all the relative standards, policy and legal requirements mentioned in CYRENE Report 2. This RCA methodology is an enhanced method of dual use, as it should be able to be used by:

• Supply Chain Services Providers and Business Partners to help them get prepared for a certification, and
• Assessors in order to demonstrate the validity of the claims, for example, in a Protection Profile.

In this document every step of the CYRENE RCA methodology is analysed in a form of scope, input and expected outcome, followed by an example for better comprehension of the reader.