Commercial off the shelf (COTS) systems or equipment

Expand all questions

Is it correct to assume that COTS IT/network elements (e.g. servers, routers, switches) do not have the need for certification or declaration, if they are not part of the equipment subject to certification/declaration? E.g. certified software is delivered by DPO, which can be run on any platform/network at the ANSP, which is not certified but fulfils the specifications provided by the DPO.