1. The manufacturer shall perform a conformity assessment of the product with digital elements and the processes put in place by the manufacturer to determine whether the essential cybersecurity requirements set out in Annex I are met. The manufacturer shall demonstrate conformity with the essential cybersecurity requirements by using any of the following procedures:

(a) the internal control procedure (based on module A) set out in Annex VIII;

(b) the EU-type examination procedure (based on module B) set out in Annex VIII followed by conformity to EU-type based on internal production control (based on module C) set out in Annex VIII;

(c) a conformity assessment based on full quality assurance (based on module H) set out in Annex VIII; or

(d) where available and applicable, a European cybersecurity certification scheme pursuant to Article 27(9).