As a reminder, European Parliament and Council negotiators agreed on the European Cybersecurity Act on 10 December 2018.
While waiting for the European Parliament and Council to formally adopt the regulation, substantive preparations are taking place for the new cybersecurity certification framework.
The future cybersecurity certificates will be recognised throughout the EU, and the certification schemes will replace national cybersecurity certification requirements.
What’s your place in all this?
As you will see in Cullen International’s new infographic, industry stakeholders and EU member states can get involved at various stages in the planning and creation of EU certification schemes. However, the process is driven by the European Commission and implemented by the EU Cybersecurity Agency (ENISA).
But what’s covered by the framework?
The framework is for the creation of EU cybersecurity certification schemes for specific ICT products, services and processes, but our infographic takes you all the way from the general work programme to when certificates are issued under a scheme.
Manufacturers and service providers can decide whether or not to get certified (or make a self-assessment in certain cases), unless certification is required by national or EU laws.
Our certification framework infographic makes the path to certification simple.
To get a free download of Cullen International’s infographic, please just "Request Access" below.
If you are interested in more cybersecurity regulatory analysis, please contact us.
We will update the infographic if there are any changes to the Cybersecurity Act before it is formally adopted (expected spring 2019).
more news
04 November 26
In nine European countries, national symmetric obligations on access to ducts go beyond the scope set by the Gigabit Infrastructure Act
Cullen International's latest benchmark analyses asymmetric and symmetric duct access obligations in Europe.
04 November 26
More than 60 cases and counting: a snapshot of European antitrust enforcement against big tech
Cullen International’s latest report on past and pending antitrust cases against big tech companies in Europe tracks enforcement activity under ex post antitrust rules at EU and national level.
30 October 26
Many governments around the globe rely on legal mechanisms to compel communications apps to cooperate in law enforcement investigations
Cullen International's latest Global Trends benchmark for number-independent communications apps regulation found that nearly all of the 13 surveyed jurisdictions around the world provide some legal mechanism to make these apps assist law enforcement in criminal investigations. There are requirements to verify user identities, compel disclosure of stored content, make encrypted content accessible, and duties to detect illegal content within private communications.