The European Common Criteria-based cybersecurity certification scheme (EUCC)

In early October 2023, the Commission published the draft of the Commission Implementing Regulation setting out the European Common Criteria-based cybersecurity certification scheme (EUCC). This scheme will introduce a set of security requirements for ICT security products (for example firewalls, encryption devices, electronic signature devices) and ICT products with an inbuilt security functionality (i.e. routers, smartphones, bank cards). It will be relevant, inter alia, in the context of the implementation of the NIS2 Directive and the proposed Cyber Resilience Act.