SRC Zert GmbH & Co. KG has been officially notified as a certification body under the European Common Criteria-based Cybersecurity Certification Scheme, or EUCC for short. This means that the company is authorized to certify IT products in accordance with the new European certification framework. In Germany, SRC Zert is currently the only private certification body in the EUCC environment.
The EUCC is the first European certification system for IT security based on the internationally established Common Criteria. It creates a uniform standard for the evaluation of security functions in products, such as software and network products. The aim is to mutually recognize security certificates within the European Union and reduce special national approaches.
For manufacturers, this means that an EUCC certificate is valid throughout Europe and thus facilitates market access, tenders and regulatory verification in safety-critical areas.
Specific services of SRC Zert
SRC Zert carries out the formal certification procedure as an independent body. This includes evaluating the test results submitted, checking conformity with the EUCC scheme and issuing the certificate. The accreditation covers, among other things, generic software and network products at the “Substantial” security level (medium confidence level).
For companies, this offers a clearly structured, comprehensible process and certification with a European reach.
Independence as a basic principle
SRC Zert works exclusively as a certification body and does not offer any preparatory advice for certification projects. This organizational and personnel separation is a prerequisite for neutrality and ensures that testing and certification decisions are made independently.
“We are the only private body in Germany authorized to carry out EUCC certifications. We take this responsibility seriously. We are ready to help shape the emerging European market from the very beginning.”
Thomas Hueske, Managing Director SRC Zert GmbH & Co. KG
