
1
min reading time
Click here for the Common Criteria Certification that was issued on the 13th March 2019.
Click here for the Common Criteria Certification that was issued on the 15th May 2019.
CCLAB is a privately owned agile security lab located in Central Eastern Europe, Hungary. CCLAB is a globally recognized evaluation facility under the Italian Common Criteria Scheme (OCSI-Organismo di Certificazione della Sicurezza Informatica) with a professional team of 10+ evaluators and 20+ supporting and test engineers. We are also an accredited ISO 17025 product testing laboratory by NAH (The Hungarian National Accreditation Authority). We have CEH, CISA, CHFI, OSCP and ISO 27001 Lead Auditor certifications. We have clients from all over the world, including DELL, Ascertia, Navayo Group, ID&Trust, Microsec, NXP and others.


This downloadable infographics introduces the Common Criteria Evaluation process to you. Explore now for free.


Learn everything you need to know for a successful Common Criteria certification project. Save costs and effort with your checklist.


Download our ETSI EN 303 635 infographics today and learn about the product certification process for this consumer IoT device cybersecurity standard.

The era of unregulated smart devices has officially come to an end. With the European Union having rolled out stringent regulations like the Cyber Resilience Act (CRA), manufacturers can no longer treat cybersecurity as an afterthought. Whether you are producing smart cameras, wearable health trackers, or connected home appliances, navigating this evolving regulatory landscape is critical. Fortunately, a globally recognized standard has emerged to cut through the complexity: ETSI EN 303 645. This guide breaks down exactly how this foundational standard acts as your security passport, ensuring your devices meet the rigorous compliance demands of today's market.
min reading time

This article provides a comprehensive guide to meeting consumer IoT security standards using the ETSI EN 303 645 framework. It explains why this standard has become the global baseline for compliance, serving as a critical foundation for regulations like the UK PSTI Act and the upcoming EU Cyber Resilience Act (CRA). The post breaks down the 13 essential security provisions, such as banning default passwords and securing software updates, and outlines a structured assessment path from scope definition to accredited testing. Learn how to treat security as a design constraint to avoid market delays, leverage gap analysis for early detection of vulnerabilities, and turn technical compliance into a trusted competitive edge for your smart devices.
min reading time

The Cyber Resilience Act (CRA) is a landmark EU regulation that establishes a horizontal framework for the cybersecurity of products with digital elements (hardware and software). This sweeping EU cybersecurity law represents a massive shift for the industry. Its goal is to ensure that products are placed on the market without known exploitable vulnerabilities and that manufacturers remain responsible for cybersecurity throughout the product's entire lifecycle. With all requirements of the CRA becoming fully applicable on December 11, 2027, the window for preparation is closing. Manufacturers who view this simply as a regulatory hurdle are missing a critical opportunity. By prioritizing CRA readiness now, you can transform a mandatory product compliance strategy into a distinct market differentiator.
min reading time