Skip to main content
European Commission logo
English
TBT - European Commission

Notification Detail

Draft Commission Implementing Regulation amending Implementing Regulation (EU) 2024/482 as regards definitions, ICT product series certification, assurance continuity and state-of-the-art documents

G/TBT/N/EU/1150

Date of arrival: 2025 August 04
-
Final date for comments: 2025 October 03
Description
In the EU Common Criteria-based cybersecurity certification scheme (EUCC), the state-of-the-art documents contain information that is relevant for its implementation. The amendment will introduce in the Implementing Regulation (Annex I) five updated state-of-the-art documents relating to minimum site security requirements, application of attack potentials to smartcards, application of attack potentials to hardware devices with security boxes, application of common criteria to integrated circuits and composite product evaluation for smartcards and similar devices.The amendment will also add five state-of-the-art documents to Annex I. These new documents relate to composite product evaluation and certification, reusing evaluation results of site audits, and clarifications regarding the interpretation of specific protection profiles (e.g. protection profile for qualified electronic signature creation devices).Furthermore, the amendment includes targeted changes in the main provisions of the EUCC and its annexes, including the definitions of major and minor change of a certified product and some corrections in the text.
Objectives:
  • Consumer Information, Labelling
  • Prevention of Deceptive Practices & Cons. Protect.
  • Quality Requirements
  • Harmonization
Fields of Activity:
Full notification form text:
Full text of the announced text or any other relevant text:
Comments, answers or reactions:
Disclaimer: Please note that the information published is not necessarily comprehensive. In particular, documents of notifications dated before 1 January 2014, and comments and answers received or sent on TBT notifications before 1 January 2018 are not publicly available due to data protection requirements. Some comments and answers received or sent after 1 January 2018 may be unavailable also for data protection reasons.