The application form on the BSI website collects the information needed to open and run the procedure and relates solely to certifying a network product under BSI NESAS. The application is submitted in writing and in German, the only legally binding version, to the BSI's Division S 26 in Bonn, with the annexes electronic; the NESAS mailbox has a published public PGP key, and the auditors and evaluation facility send their documents to the certification body separately. When a sponsor or distributor rather than the vendor applies, a vendor's written declaration that it will take part and provide the product evidence must accompany the application. When test-relevant product parts or evidence come from third parties, or the applicant does not hold rights to all of them, each third party must submit a declaration confirming its participation, naming the organisation, the specifically agreed duties to cooperate and inform, and fully describing the components of the evaluation object the cooperation covers.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.