ENISA work in the area of certification                     

Trustworthiness and security of information technology products can be achieved by setting in place a certification framework. In Europe, a common ICT product security certification scheme would support the recognition of trustworthiness of products across Member States, and such recognition is an essential pillar towards achieving the trust and security required to promote a Digital Single Market. Currently, there is no framework for the certification of ICT security products at a European level, although the already existing SOG-IS agreement includes 13 Member States and Norway.

Over the last years, ENISA has engaged in a number of activities in pursuit of supporting the Commission and the Member States in identifying a way forward on the certification of ICT security products and services, which on the one hand seeks to boost competition and on the other to promote mutual recognition or harmonisation of certification practices across EU MS.

In 2017, the Agency conducted an EU-wide survey on the considerations of stakeholders and also provided an analysis of the current landscape of ICT security certification laboratories in EU Member States.

In September 2017 the European Commission alongside an updated mandate for the Agency, proposed an EU cybersecurity certification framework. Building on existing successes accomplished by EU Member States (MS), the proposal addresses the growing need for security in the area of products and services. To address the needs of businesses and consumers alike the Commission proposal seeks to complement the efforts of the EU MS by coordinating the governance, aligning the drawing up of certification schemes and providing a single source of authorisation for such schemes. In this way, the proposal tackles such issues as, market fragmentation, limitations in consumer protection and shortcomings in market recognition that can affect businesses and consumers alike.

We use cookies on our website to support technical features that enhance your user experience.
We also use analytics. To opt-out from analytics, click for more information.

I've read it More information