Boundaries of the system / constituent are defined by the DPO. As such, COTS IT equipment can be well outside of the system subject to certification / declaration. Such system can be composed of SW only.
When a certain equipment requires underlying/supporting infrastructure (e.g. IT, network, cloud), the characteristics and requirements for this infrastructure are to be defined by the DPO and provided to the ANSP with the installation and operation instructions and any other integration requirements. The underlying infrastructure does not necessitate to be part of the equipment design and therefore does not necessarily form part of the certification envelope.
