HomepageBusiness CustomersAll ServicesDigital & Product SolutionsCybersecurity ServicesICT CybersecurityEUCC Certification Scheme

EUCC Certification Scheme

What is EUCC Certification Scheme?

The EU Common Criteria Certification (EUCC) scheme, established under the products, services, and processes across the European Union. This scheme is based on Common Criteria (ISO/IEC 15408) and Common Evaluation Methodology (ISO/IEC 18045) and ensures robust security, fosters trust, and facilitates the free movement of certified products within the EU.

DEKRA is a Conformity Assessment Body (CAB) consisting in an accredited Certification Body (CB) and Information Technology Security Evaluation Facility (ITSEF) operating under the EUCC scheme at substantial assurance level.

Our Services

The EUCC CAB provides certification for ICT products under the EUCC scheme, covering a wide range of products such as software, network devices, smart cards, and hardware devices. Focused on a "Substantial level" (AVA_VAN.3) of security, DEKRA offers the following services:

ICT Product Certification

Assurance Continuity

Surveillance and Monitoring Activities

Conformity and Compliance

EUCC Certification Scheme Vulnerability Management and Disclosure

In addition to initial certification, DEKRA offers full coverage of the certification lifecycle including certificate’s maintenance and monitoring services (each 2 years), which help to maintain the validity of the certificate throughout the product lifecycle. These services include re-assessment, maintenance, patch management, and certificate review.

EUCC Certification Scheme Application Form

Ready for your certification?

A Holistic & Trusted Approach to Digital Security

Gain actionable insights from this panel discussion on how to demonstrate the cybersecurity of ICT products across the EU.

All the certificates will be publicly available in DEKRA's Certificates Directory.

Whilst DEKRA has its own laboratory to perform the evaluation activity, this labor can be externalized to another laboratory through legally binding agreements. Subcontractors (ITSEFs), must be independent, ISO/IEC 17025 accredited, and adhere to EUCC requirement. The CB oversees subcontractor activities via a Technical Manager, who monitors qualifications, collects records of assessments, addresses non-conformities, and ensures compliance with operational procedures.

Why DEKRA is the Right Partner for EUCC Certification

Proven Expertise in Common Criteria (CC) Evaluations

With years of hands-on experience in CC evaluations, we bring deep technical know-how and a robust certification process you can trust.

Quality You Can Rely On

Every evaluation is thorough, consistent, and aligned with both regulatory requirements and market expectations.

Client-Focused Support

We adapt the certification process to your product, business model, and timeline. Our approach makes EUCC certification clearer and faster.

Related Services