The emerging EU framework on cybersecurity certification

Abstract

The emerging EU cybersecurity certification framework proposed by the European Commission by means of the Cybersecurity Act seeks to complement the efforts of the EU Member States in the area of certification of products and services. While EU Member States retain full operational capacity in the aftermath of this proposal, a European Cybersecurity Coordination Group undertakes the governance of the certification framework and ENISA assumes a role in the drawing up of certification schemes. The expectation that the EU certification framework build upon is that it will enhance the ability of the EU to compete in the global cyber-security arena and improve security conditions for consumers and businesses in the EU as a whole.