The European Cybersecurity Certification Group was established to help ensure the consistent implementation and application of the Cybersecurity Act.
About the European Cybersecurity Certification Group (ECCG)
The ECCG has the following tasks:
- to advise and assist the Commission in its work to ensure the consistent implementation and application of the Cybersecurity Act, in particular regarding the Union rolling work programme, cybersecurity certification policy issues, the coordination of policy approaches, and the preparation of European cybersecurity certification schemes;
- to assist, advise and cooperate with ENISA in relation to the preparation of a candidate scheme;
- to adopt an opinion on candidate schemes prepared by ENISA;
- to request ENISA to prepare candidate schemes;
- to adopt opinions addressed to the Commission relating to the maintenance and review of existing European cybersecurity certifications schemes;
- to examine relevant developments in the field of cybersecurity certification and to exchange information and good practices on cybersecurity certification schemes;
- to facilitate the cooperation between national cybersecurity certification authorities under the Cybersecurity Act through capacity-building and the exchange of information, in particular by establishing methods for the efficient exchange of information relating to issues concerning cybersecurity certification;
- to support the implementation of peer assessment mechanisms in accordance with the rules established in a European cybersecurity certification;
- to facilitate the alignment of European cybersecurity certification schemes with internationally recognised standards, including by reviewing existing European cybersecurity certification schemes and, where appropriate, making recommendations to ENISA to engage with relevant international standardisation organisations to address insufficiencies or gaps in available internationally recognised standards.
Members
The ECCG is composed of representatives of national cybersecurity certification authorities or representatives of other relevant national authorities. See the list of members (.pdf).
A member of the ECCG cannot represent more than two Member States. Stakeholders and relevant third parties may be invited to attend meetings of the ECCG and to participate in its work.
The Commission chairs the ECCG, with the assistance of ENISA. The Commission also provides the secretariat of the group.
The European Cybersecurity Certification Group meetings agendas
The ECCG meets regularly, usually during plenary sessions. The agenda is proposed by the secretariat and agreed on by all members. This page is regularly updated with the agendas of the previous meetings.
List of previous meetings agendas
- 25th Meeting of the ECCG, 11 March 2025
- 24th Meeting of the ECCG, 20 February 2025
- 23rd Meeting of the ECCG, 5 December 2024
- 22nd Meeting of the ECCG, 18 June 2024
- 21st Meeting of the ECCG, 15 April 2024
- 20th Meeting of the ECCG, 20 March 2024
- 19th Meeting of the ECCG, 29 February 2024
- 18th Meeting of the ECCG, 20 November 2023
- 17th Meeting of the ECCG, 20 October 2023
- 16th Meeting of the ECCG, 22 September 2023
- 15th Meeting of the ECCG, 12 July 2023
- 14th Meeting of the ECCG, 26 May 2023
- 13th Meeting of the ECCG, 25 November 2022
- 12th Meeting of the ECCG, 28 June 2022
- 11th Meeting of the ECCG, 8 December 2021
- 10th Meeting of the ECCG, 28 June 2021
- 9th Meeting of the ECCG, 22 February 2021
- 8th Meeting of the ECCG, 27 November 2020
- 7th Meeting of the ECCG, 16 September 2020
- 6th Meeting of the ECCG, 7 July 2020
- 5th Meeting of the ECCG, 20 May 2020
- 4th Meeting of the ECCG, 13 March 2020
- 3rd Meeting of the ECCG, 27 January 2020
- 2nd Meeting of the ECCG, 13 November 2019
- 1st Meeting of the ECCG, 18 September 2019