With the EUCC, the EU is introducing a standardized certification scheme for IT products. What is behind the abbreviation, why is it relevant and where is the journey heading for manufacturers, testing institutes and users? An initial overview.
Uniform cyber security standards for Europe
Digital products have become an integral part of our everyday lives – whether routers, firewalls or industrial controllers. But how secure are they really? And how can this be proven?
Until now, many EU countries have used their own national certification systems. In Germany, for example, this was the Common Criteria certification by the BSI. However, this diversity also has disadvantages: It was costly for manufacturers to get products approved across the EU or to prove security. This is precisely where the new EUCC comes in.
What does EUCC mean?
EUCC stands for European Union Cybersecurity Certification and is the first European scheme for certifying the cybersecurity of IT products. It was developed as part of the Cybersecurity Act, which has formed the legal basis for uniform security certification in the EU since 2019.
On what basis does the EUCC work?
The EUCC is based on the international Common Criteria (ISO/IEC 15408). These define standards for the testing and evaluation of IT products by independent testing institutes. These standards were revised for the EUCC and adapted to European framework conditions – particularly with regard to data protection and strategic security interests.
Who benefits from the EUCC?
Even though the certificate is voluntary, it offers clear advantages:
-
Manufacturers can create trust with the EUCC certificate and market their products more easily throughout Europe.
-
Users and authorities recognize certified products more easily as safe.
-
Inspection bodies receive a standardized framework for their work – with high quality standards.
The EUCC will become increasingly important in the coming years, particularly in sensitive areas such as critical infrastructures or public administration.
Current status
According to a BSI press release dated March 25, 2025, the EUCC is currently still in the final coordination phase. However, the first test centers and preparations are already underway – so the practical application of the scheme is getting closer.
And what about us?
The SRC, as the testing body for the EUCC, is also intensively involved with the requirements and opportunities of the EUCC – particularly with regard to the transition from national certifications to European recognition. Further current articles will follow.
