The Implementing Regulation sets out the European Common Criteria-based cybersecurity certification scheme.The scheme applies on a voluntary-basis EU-wide and focuses on certifying the cybersecurity of ICT products in their lifecycle: biometric systems, firewalls (both hardware and software), detection and response platforms, routers, switches, specialised software (such as SIEM and IDS/IDP systems), data diodes, operating systems (including for mobile devices), encrypted storages, databases as well as smart cards and secure elements included in all sorts of products, such as in passports daily used by all the citizens.
Author: European Commission
Status: Adopted / Published
Adoption date: 2024-01-31
Last updated: 08 Aug 2025
Category: Relevant legislation
Subcategory: Implementing Regulation