CRA & EUCC Implementation

Cyber Resilience Act implementation via EUCC and its applicable technical elements

This report examines the implementation of the Cyber Resilience Act (CRA) in relation to the EU Common Criteria (EUCC) certification scheme. It details the alignment between CRA requirements and EUCC, focusing on security objectives, conformity assessments, and applicable technical elements. The study seeks to examine the technical aspects of implementing the CRA through the EUCC as a European cybersecurity certification scheme, focusing on its technical elements and provides potential conclusions that could be considered by the European Commission when establishing presumption of conformity.