
Certified Security for ICT Products & Services
LINCE certification is a lightweight cybersecurity evaluation designed to assess and accredit ICT products for secure information management. Developed by the Spanish National Cryptologic Centre (CCN), this methodology provides a streamlined alternative to Common Criteria (CC) evaluation, making it ideal for products handling sensitive data with lower threat exposure.
For ICT manufacturers, obtaining LINCE certification ensures official recognition and eligibility for inclusion in the Spanish CPSTIC product catalogue, a key requirement for organizations aiming to supply government institutions and critical infrastructure sectors.
The CPSTIC product catalogue is the official list of ICT security products and services recognized for their proven cybersecurity requirements. Maintained by the Products and Technologies Department of the National Cryptologic Centre (CCN-PYTEC), this catalogue serves as a trusted reference for the Spanish Administration in the protection of IT assets.
Discover the CPSTIC Product Catalogue: Spain’s Trusted List of Certified ICT Solutions
The CPSTIC product catalogue serves as a key reference for the Spanish public sector and the organizations that act as suppliers of ICT solutions through public tenders and procurement processes. To facilitate informed decision-making and ensure alignment with the security requirements, three product categories are distinguished:
DEKRA Services for LINCE & CPSTIC Product Catalogue
Our streamlined approach ensures that ICT products meet baseline cybersecurity requirements while achieving successful qualification and inclusion in the CPSTIC product catalogue.
CPSTIC Catalogue Inclusion of ICT Security Products
LINCE Certification for ENS Medium Compliance
STIC Evaluation for ENS Certification
STIC Evaluation for ENS High Level
Compliance Framework for Classified Information
Long-Term Certification Management

Why DEKRA is the Right Partner for LINCE Certification
At DEKRA we have extensive expertise and in-depth knowledge covering both the LINCE certification and qualification process, ensuring your product meets all the requirements for successful inclusion in the CPSTIC product catalogue. By choosing DEKRA, you benefit from proven expertise that streamlines the testing and compliance journey, safeguarding your products, processes and systems through comprehensive cybersecurity evaluations and certification.

Common Criteria ISO/IEC 15408
Common Criteria is a Certification Framework to evaluate and certify cybersecurity requirements in IT products.
Details

EUCC Scheme
EUCC services, based on Common Criteria (ISO/IEC 15408), ensure ICT products meet EU cybersecurity requirements.
Details

eIDAS 2.0
We help trust service providers and organizations comply with eIDAS 2.0 Regulation through expert audit services that strengthen digital identity security.
Details

Cloud Application Security Assessment
Ensure your data security with CASA, preventing threats and increasing consumer trust.
Details

FIPS 140-3 Certification
At DEKRA, we guide our customers through the FIPS 140-3 certification process, performing validation testing and providing timely and professional support.
Details

ISO/IEC 19790
DEKRA's private certification scheme provides a framework for certifying cryptographic modules, offering transparency to users and stakeholders.
Details

Cybersecurity Testing & Certification
Cybersecurity Evaluations and Certifications for a Safe, Secure and Reliable Future.
Details
