ENAC has recently granted LGAI Technological Center (Applus) accreditation to carry out ICT product security assessment based on requirements established in the new European certification scheme based on Common Criteria (EUCC).

LGAI therefore becomes the first body accredited in Spain to carry out this activity, as well as one of the first bodies that can provide this service in Europe.

 

European Cybersecurity certification

EUCC, developed by the European Union Agency for Cybersecurity (ENISA) and recently approved by Commission Implementing Regulation (EU) 2024/482, is part of the European Union's cybersecurity certification framework that emerged as a result of the publication of Regulation (EU) 2019/881, popularly known as the Cybersecurity Act.

This scheme aims to raise the cybersecurity level in ICT products, services, and processes in the EU market, allowing suppliers in the sector wishing to demonstrate their ICT product security (technological components such as chips or smart cards, hardware, and software) to undergo a common EU assessment process to certify these products.

Developing the EUCC was the result of intense work carried out at ENISA with stakeholders participating, with ENAC playing a leading role in developing the documents "Accreditation of ITSEFs for the EUCC Scheme" and "Accreditation of CBs for the EUCC Scheme", with Rosalina Porres, Head of ICT section in ENAC's Laboratories and Product Certification department and responsible for cybersecurity accreditation schemes, as EA's working group representative that put together these documents.

If you are interested in applying for accreditation for the aforementioned activity, contact Rosalina Porres.