Skip to main content
Shaping Europe’s digital future
Policy and legislation | Publication

Implementing Regulation on the adoption of a European Common Criteria-based cybersecurity certification scheme

This Regulation specifies the roles, rules and obligations, as well as the structure of the European Common Criteria-based cybersecurity certification scheme in accordance with the European cybersecurity certification framework set out in Regulation (EU) 2019/881.

The European Common Criteria-based cybersecurity certification scheme (EUCC) builds on the Mutual Recognition Agreement (‘MRA’) of Information Technology Security Certificates of the Senior Officials Group Information Systems Security  (‘SOG-IS’) using the Common Criteria, including the group’s procedures and documents. 

The European Cybersecurity Certification Group will play an important role in the maintenance of the scheme. It should, inter alia, be carried out through cooperation with the private sector, the creation of specialised subgroups and relevant preparatory work and assistance requested by the Commission. 

More on the EU cybersecurity certification framework

 

Downloads

1. Implementing Regulation on the adoption of a European Common Criteria-based cybersecurity certification scheme
Download 
2. Annex to the Implementing Regulation on the adoption of a European Common Criteria-based cybersecurity certification scheme
Download