Management Committee's Response. The Management Committee is to acknowledge the application within three weeks of its receipt and make a preliminary response to it within a target of three months. The preliminary response should indicate the acceptability of the application assuming that technical examination of the documentation and the shadow certification are successful. When the Management Committee concurs that the information supplied by the applicant is satisfactory and that no clarification or supplementary information is required, the applicant will be asked to nominate as candidates for Shadow Certification at least two products for which a EAL3 or EAL4 (CC level) resp. E2 or E3 (ITSEC level) evaluation level as a minimum is claimed. At least one of these must be an EAL4 (CC) resp. E3 (ITSEC) evaluation. The applicant shall supply an outline summary of each product and details of the arrangements for its evaluation and certification. The Management Committee will, within a target of one month of receipt of the nomination, select two of the products for shadow certification and notify the applicant accordingly. The Management Committee is to select two or more Qualified Participants (other than the CB's Authorizing Participant) to carry out the shadow certification. The Participants selected are to make nominations for a primary assessment team to consist of two experts. Any Participant (including the Authorizing Participant) may provide an additional expert at its own expense. Other Participants (qualified or not) can propose to attend as observers to the assessment. The Management Committee could define a limit in the number of them, but a minimum of two observers should be allowed. The Management Committee is to inform the applicant of the names and parent organisations of the experts. Where the CB applicant has already been granted a Qualifying status through a similar procedure within the framework of another international Mutual Recognition Agreement, the Management Committee may decide to exempt partly the applicant from the procedures there laid down.
Management Committee's Response. The experts are to report their findings on the Shadow procedures, the audits and the vulnerability analysis assessments in writing to the Management Committee within one month of the completion of their work, together with a recommendation on whether the candidate's application should be accepted or rejected. The Management Committee is to make its decision based on these reports and recommendations. This decision may be either to reject the application, or to accept it possibly with limitations regarding the level of Recognition or regarding the IT technical domains covered. The Management Committee is then to convey its decision to the applicant in writing within a target of two months following receipt of the experts’ reports. In the case of rejection, the Committee should provide a summary of the reasons for the decision and of the principal evidence on which it is based. In the case of acceptance, the Committee shall record the decision by updating Annex K accordingly.
Management Committee's Response. 29 The Management Committee is to acknowledge the application within three weeks of its receipt and shall make a preliminary response to it within a target of three months.
