
1
min reading time
A fraction of aspect and at the same time unthinkable damages.
Here at CCLab, we have always kept our focus on the most critical corners of IT and high-security solutions.
We have been able to develop and widen our experiences throughout the years.
In 2019 our Smart Metering Division has handled a number of projects and we have been able to refocus some of our resources towards the field of IoT.
We believe in the new digital era where IoT devices available with state of the art security.
Thanks to jtsec’s retrospect of 2019, it is easier than ever to identify and understand schemas within high-security products.
As in 2019, we have successfully evaluated 5 products within Common Criteria. We stand proudly in the midfield next to most acknowledged laboratories by the number of evaluations.
See the international report.


This downloadable infographics introduces the Common Criteria Evaluation process to you. Explore now for free.


Learn everything you need to know for a successful Common Criteria certification project. Save costs and effort with your checklist.


Download our ETSI EN 303 635 infographics today and learn about the product certification process for this consumer IoT device cybersecurity standard.

This article provides a strategic guide to the new EUCC assurance levels, explaining what "Substantial" and "High" certifications actually mean for your market access. It demystifies the critical shift from simple EAL numbers to risk-based vulnerability analysis (AVA_VAN), detailing exactly which products require advanced penetration testing versus basic surveys. You will learn how to map your device to the correct assurance category, navigate the new mandatory lifecycle and patching requirements, and avoid the costly trap of over-engineering your compliance strategy.
5
min reading time

This is a comprehensive overview of the transition to EUCC (European Common Criteria-based cybersecurity certification scheme). It effectively highlights the shift from the old, fragmented SOG-IS approach to a unified, risk-based framework under the Cybersecurity Act.
8
min reading time

As the 11 September 2026 reporting deadline approaches, understanding the Cyber Resilience Act (CRA) is essential for all manufacturers of digital products. This blog post explores the key differences and overlaps between the CRA and the EUCC certification scheme, providing a clear roadmap for compliance, risk categorization, and long-term market access.
9
min reading time