top of page

IT and ICT equipment,

Updated: May 6

European Commission

Notified under Article 2.9.2 [X], 2.10.1 [ ], 5.6.2 [X], 5.7.1 [ ], 3.2 [ ], 7.2 [ ], other:

The European cybersecurity certification framework aims at increasing the trustworthiness of ICT products, ICT services and ICT processes by means of European cybersecurity certification schemes, as certification demonstrates that the scheme's cybersecurity requirements have been met. The framework also aims at avoiding the overlap of cybersecurity certification schemes across the Member States, reducing costs for undertakings operating in the digital single market as well as making available, transparent and comparable assurance statements to customers by means of certificates including marks and labels.

The scheme builds on international standards (see point 8). The requirements and conformity assessment procedures are based on international standards.

Objective and rationale, including the nature of urgent problems where applicable: By providing scalable assurance about cybersecurity measures up to the highest sophistication of cyberattacks, the EUCC scheme will enhance trust in the digital single market. EUCC certification provides coherent and consistent information about cybersecurity properties in a value chain so that customers can make informed decisions. In EUCC certification, cybersecurity claims of an ICT product extend over their lifecycle. EUCC certification increases the probability of discovering and removing unwarranted risks, such as illicit data exfiltration, and thus discourages the placing of insecure products on the market; Consumer information, labelling; Prevention of deceptive practices and consumer protection; Quality requirements

Both standards are used by the international Common Criteria community convened under the CCRA.

Proposed date of adoption:4th Quarter 2023

Proposed date of entry into force: 20 days from publication in the Official Journal of the EU, with some provisions applying one year after entry into force.

European Commission,

EU-TBT Enquiry Point,

Fax: + (32) 2 299 80 43,

The text is available on the EU-TBT Website :

10 views0 comments


bottom of page