What parts of the system need to be certified/how can we define the equipment/constituent that needs to be certified. E.g. Flight strips System with several servers, operating system and virtualisation, switches, operating position equipment plus some software components. Can the DPO only certify the software, with definition of hardware requirements and the customer (or we) purchases any COTS HW, which fulfills these requirements?
What parts of the system need to be certified/how can we define the equipment/constituent that needs to be certified. E.g. Flight strips System with several servers, operating system and virtualisation, switches, operating position equipment plus some software components. Can the DPO only certify the software, with definition of hardware requirements and the customer (or we) purchases any COTS HW, which fulfills these requirements?
Answer
It is a decision of the DPO to set the boundaries of the equipment that they wish to certify/declare.
COTS HW is not automatically excluded because it is COTS. However, if COTS HW is part of the supporting infrastructure, then it may fall out of the product boundaries.
Last updated
03/01/2024