1
min reading time
Click here for the Common Criteria Certification that was issued on the 13th March 2019.
Click here for the Common Criteria Certification that was issued on the 15th May 2019.
CCLAB is a privately owned agile security lab located in Central Eastern Europe, Hungary. CCLAB is a globally recognized evaluation facility under the Italian Common Criteria Scheme (OCSI-Organismo di Certificazione della Sicurezza Informatica) with a professional team of 10+ evaluators and 20+ supporting and test engineers. We are also an accredited ISO 17025 product testing laboratory by NAH (The Hungarian National Accreditation Authority). We have CEH, CISA, CHFI, OSCP and ISO 27001 Lead Auditor certifications. We have clients from all over the world, including DELL, Ascertia, Navayo Group, ID&Trust, Microsec, NXP and others.
This downloadable infographics introduces the Common Criteria Evaluation process to you. Explore now for free.
Learn everything you need to know for a successful Common Criteria certification project. Save costs and effort with your checklist.
Download our ETSI EN 303 635 infographics today and learn about the product certification process for this consumer IoT device cybersecurity standard.
In an increasingly interconnected world, cybersecurity has become more than just a technical requirement, it's a critical shield protecting organizations from potential digital threats. Common Criteria (CC), an internationally recognized standard also known as ISO/IEC 15408, emerges as a comprehensive framework that meticulously evaluates the security properties of IT products and systems. This international standard provides a structured approach to assessing technological security, offering governments, enterprises, and technology developers a robust methodology for understanding and validating the security mechanisms embedded within their digital solutions. Moreover, Common Criteria serves as a critical benchmark, ensuring that technological products meet rigorous security standards before entering the marketplace.
10
min reading time
Imagine this: weeks from launching a connected device in Europe, hardware set, software frozen, marketing ready, then a wall. A Notified Body flags missing cybersecurity evidence under the Radio Equipment Directive (RED). The fix? A costly, months-long redesign. This happens more often than teams expect. Last-minute failures on cybersecurity aren’t always due to weak security, but missing evidence or test docs RED demands. And it’s not just Europe, globally, security rules are tightening, and buyers are asking tougher questions before contracts. RED’s Articles 3.3(d), 3.3(e), and 3.3(f) are shaping secure-by-design norms worldwide. Manufacturers treating them as a baseline not only pass audits but gain an edge. Embedding these principles early cuts risk, streamlines compliance, and proves to customers that security isn’t an afterthought. Let’s unpack why.
8
min reading time
As Europe advances its digital transformation agenda, securing its technological infrastructure has become a top priority. At the center of this ambition lies the European cybersecurity certification ecosystem. Most notably, the European Cybersecurity Certification Scheme (EUCC). Designed to harmonize security assurance practices across EU member states, EUCC is the first concrete step under the EU Cybersecurity Act to create a unified framework for certifying ICT products and services. But while EUCC represents a major achievement in digital sovereignty, a crucial question remains: Is it enough? This article explores what the European Cybersecurity Certification does well, where its current limitations lie, and what additional steps are necessary to create a truly resilient cybersecurity landscape across Europe.
7
min reading time