(1) The certification mark, as used or intended to be used by persons authorized by the certifier, certifies or is intended to certify that the services provided have been tested, evaluated, and verified with respect to knowledge, skills, training, and appropriate experience of the certified service provider in the field of industrial automation and control system security, with respect to application of risk-informed engineering principles. (2) Applicant will not engage in the production or marketing of the goods or services to which the mark is applied, except to advertise or promote recognition of the certification program or of the goods or services that meet the certification standards of the Applicant. 37 CFR 2.45(a)(4)(ii)(B).