Draft Commission Implementing Regulation laying down rules for the application of Regulation (EU) 2019/881 of the European Parliament and of the Council as regards the adoption of the European Common Criteria-based cybersecurity certification scheme (EUCC)

Quality requirements (TBT); Prevention of deceptive practices and consumer protection (TBT); Consumer information, labelling (TBT)

The draft certification scheme primarily covers specialised IT and ICT equipment, such as integrated circuits, smart cards and related products (cryptographic elements, microcontrollers, dedicated software), network devices and systems (routers, switches, access points) and products for digital signatures (cryptographic modules, hardware security modules, secure servers). The draft certification scheme is not aimed at general purpose or consumer products

Link to ePing

35 - Information technology

This draft Commission Implementing Regulation introduces the European Union Common Criteria-based certification scheme (EUCC) as the first scheme under the CSA certification framework.The European cybersecurity certification framework aims at increasing the trustworthiness of ICT products, ICT services and ICT processes by means of European cybersecurity certification schemes, as certification demonstrates that the scheme’s cybersecurity requirements have been met. The framework also aims at avoiding the overlap of cybersecurity certification schemes across the Member States, reducing costs for undertakings operating in the digital single market as well as making available, transparent and comparable assurance statements to customers by means of certificates including marks and labels.The scheme builds on international standards (see point 8). The requirements and conformity assessment procedures are based on international standards.

1:File here 2:File here

EN:File here

FR:File here

ES:File here

Active Inactive