Translations:Cyber Security Act (CSA)/14/en

In January 2024, the European Commission adopted the Implementing Regulation for the EU Cybersecurity Certification Scheme based on Common Criteria (EUCC), which is based on the SOG-IS scheme. The EUCC system is voluntary and allows ICT providers who wish to demonstrate reliability to undergo an EU-wide uniform assessment procedure to certify ICT products such as technological components (chips, smartcards), hardware, and software. It proposes two security levels based on the risk associated with the intended use of the product, service, or process, in terms of the likelihood and impact of an accident. The EUCC is thus the first European certification scheme and will enter into force on February 27, 2025.