Draft table: | In house | Component | out-sourced | Assessment of standards products | Assessment of normal products -- | -- | -- | -- | -- | -- FOSS | Annex I | Due diligence for FOSS | ? | Self | Self (if doc) Proprietary | Annex I | Due diligence | Due diligence | Self | 3rd party or standard-based