Peer Review Plan Rules for Cybersecurity Certification

Commission Implementing Regulation (EU) 2025/2462 of 9 December 2025 laying down rules for the application of Regulation (EU) 2019/881 of the European Parliament and of the Council as regards the establishment of the plan for peer review

This implementing regulation sets out operational rules for the peer‑review mechanism under the EU cybersecurity certification framework. It establishes scheduling and rotation of peer reviews of National Cybersecurity Certification Authorities (NCCAs), criteria for peer‑review teams, observer roles (e.g., ENISA), procedures for conducting reviews, and reporting templates to support consistent evaluation and shared learning across Member States.