Guide and Checklist for Common Criteria Evaluations - updated with EUCC Scheme

Are you planning to start a Common Criteria evaluation? Are you afraid of starting it?

Whether you're new to the process or seeking to enhance your understanding, our guide and checklist are here to support your journey. Dive into the elements of CC evaluation, ensuring a thorough and effective assessment every step of the way.

Let us make it simpler for You and get certified on the desired evaluation assurance level!

We gathered all the information You will need for a smooth Common Criteria evaluation project.

Get your product or solution Common Criteria/ EUCC certified on the desired assurance level — Substantial or High — with full CC:2022 compliance.

This publication fully updated in early 2026 and now fully incorporates the enforced European Cybersecurity Certification Scheme (EUCC).

The EUCC officially commenced on 27 February 2025 – since then no new national scheme certifications can be started, and all evaluations follow the harmonised ISO/IEC 15408:2022 (CC:2022) standards with the two assurance categories: Substantial and High.

In this Common Criteria Evaluation guide, you’ll learn:

The must-knows before starting a CC evaluation process  in the EUCC era

The main phases of the cc evaluation project

The most important steps required to ensure a successful Common Criteria (CC) evaluation (and certification) project based on CC methodology.

You will also find the list of necessary documents in one place that the Developer/Sponsor will need to provide for the Common Criteria evaluation.

Bonus: the complete EUCC timeline, Substantial vs High mapping, exact communication flow, Observation/ETR/CR process and the full end-to-end project overview (updated with the 2026 supplemental section)

Get your product or solution Common Criteria/ EUCC certified on the desired assurance level

Empower yourself with the knowledge and resources needed to excel in Common Criteria Evaluation. With our guide and checklist at your disposal (including the new 2026 supplemental update and the enforced EUCC rules), you'll be well-equipped to navigate the intricacies of security assessment. Dive in today!