The European Cybersecurity Certification Group

The European Cybersecurity Certification Group was established to help ensure the consistent implementation and application of the Cybersecurity Act.

Three people sit at a table but you can only see hands. One works on a laptop, which has icons coming out, the most prominent of which is a padlock. — © iStock by Getty Images -11392912672 metamorworks

About the European Cybersecurity Certification Group (ECCG)

The ECCG has the following tasks:

to advise and assist the Commission in its work to ensure the consistent implementation and application of the Cybersecurity Act, in particular regarding the Union rolling work programme, cybersecurity certification policy issues, the coordination of policy approaches, and the preparation of European cybersecurity certification schemes;
to assist, advise and cooperate with ENISA in relation to the preparation of a candidate scheme;
to adopt an opinion on candidate schemes prepared by ENISA;
to request ENISA to prepare candidate schemes;
to adopt opinions addressed to the Commission relating to the maintenance and review of existing European cybersecurity certifications schemes;
to examine relevant developments in the field of cybersecurity certification and to exchange information and good practices on cybersecurity certification schemes;
to facilitate the cooperation between national cybersecurity certification authorities under the Cybersecurity Act through capacity-building and the exchange of information, in particular by establishing methods for the efficient exchange of information relating to issues concerning cybersecurity certification;
to support the implementation of peer assessment mechanisms in accordance with the rules established in a European cybersecurity certification;
to facilitate the alignment of European cybersecurity certification schemes with internationally recognised standards, including by reviewing existing European cybersecurity certification schemes and, where appropriate, making recommendations to ENISA to engage with relevant international standardisation organisations to address insufficiencies or gaps in available internationally recognised standards.

Members

The ECCG is composed of representatives of national cybersecurity certification authorities or representatives of other relevant national authorities. A member of the ECCG cannot represent more than two Member States. Stakeholders and relevant third parties may be invited to attend meetings of the ECCG and to participate in its work.

The European Cybersecurity Certification Group meetings agendas

The ECCG meets regularly, usually during plenary sessions. The agenda is proposed by the secretariat and agreed on by all members. This page is regularly updated with the agendas of the previous meetings.

List of previous meetings agendas

List of minutes from previous meetings

Latest News

PRESS RELEASE | 11 April 2024

Commission publishes Recommendation on Post-Quantum Cryptography

Today, the Commission has published a Recommendation on Post-Quantum Cryptography to encourage Member States to develop and implement a harmonised approach as the EU transitions to post-quantum cryptography. This will help to ensure that the EU's digital infrastructures and services are secure in the next digital era.

PRESS RELEASE | 05 April 2024

EU and US continue strong trade and technology cooperation at a time of global challenges

Today, the EU and the United States held the sixth meeting of the EU-US Trade and Technology Council (TTC) in Leuven, Belgium. The meeting allowed ministers to build on ongoing work and present new deliverables of the TTC after two and a half years of cooperation.

PRESS RELEASE | 26 March 2024

EU and Republic of Korea reaffirm their partnership for an inclusive and resilient digital transformation

The EU and the Republic of Korea held the second Digital partnership Council in Brussels. The Council was co-chaired by Commissioner for the Internal Market, Thierry Breton, and by Korean Minister for Science and Information and Communication Technology, Dr. Lee Jong-Ho.

DIGIBYTE | 20 March 2024

DHS and DG CONNECT announce initiative comparing cyber incident reporting to better align transatlantic approaches

The first step in this focused initiative includes an analysis of similarities and differences between the recommendations of the DHS Report on Harmonization of Cyber Incident Reporting to the Federal Government and the cybersecurity incident reporting framework under the NIS 2 Directive in the EU.

Browse Cybersecurity