

Certified Security for ICT Products & Services
LINCE certification is a lightweight cybersecurity evaluation designed to assess and accredit ICT products for secure information management. Developed by the Spanish National Cryptologic Centre (CCN), this methodology provides a streamlined alternative to Common Criteria (CC) evaluation, making it ideal for products handling sensitive data with lower threat exposure.
For ICT manufacturers, obtaining LINCE certification ensures official recognition and eligibility for inclusion in the Spanish CPSTIC product catalogue, a key requirement for organizations aiming to supply government institutions and critical infrastructure sectors
The CPSTIC product catalogue is the official list of ICT security products and services recognized for their proven cybersecurity requirements. Maintained by the Products and Technologies Department of the National Cryptologic Centre (CCN-PYTEC), this catalogue serves as a trusted reference for the Spanish Administration in the protection of IT assets.
Discover the CPSTIC Product Catalogue: Spain’s Trusted List of Certified ICT Solutions
The CPSTIC product catalogue serves as a key reference for the Spanish public sector and the organizations that act as suppliers of ICT solutions through public tenders and procurement processes. To facilitate informed decision-making and ensure alignment with the security requirements, three product categories are distinguished:
Products that have successfully passed a rigorous evaluation process, where the validated methodology is applied to ensure full compliance with the security requirements outlined in the Declaration of Safety. This process confirms the product’s adherence to the recognized cybersecurity standards.
DEKRA Services for LINCE & CPSTIC Product Catalogue
Our streamlined approach ensures that ICT products meet baseline cybersecurity requirements while achieving successful qualification and inclusion in the CPSTIC product catalogue.
CPSTIC Catalogue Inclusion of ICT Security Products
LINCE Certification for ENS Medium Compliance
STIC Evaluation for ENS Certification
STIC Evaluation for ENS High Level
Compliance Framework for Classified Information
Long-Term Certification Management
Discover the complete process of incorporating your product into the CPSTIC catalogue. Explore how, through DEKRA's testing and certification services, manufacturers can achieve successful inclusion.
Download the Infographic now!
Why DEKRA is the Right Partner for LINCE Certification
At DEKRA we have extensive expertise and in-depth knowledge covering both the LINCE certification and qualification process, ensuring your product meets all the requirements for successful inclusion in the CPSTIC product catalogue. By choosing DEKRA, you benefit from proven expertise that streamlines the testing and compliance journey, safeguarding your products, processes and systems through comprehensive cybersecurity evaluations and certification.
Common Criteria is a Certification Framework to evaluate and certify cybersecurity requirements in IT products.
Details
EUCC services, based on Common Criteria (ISO/IEC 15408), ensure ICT products meet EU cybersecurity requirements.
Details
We help trust service providers and organizations comply with eIDAS 2.0 Regulation through expert audit services that strengthen digital identity security.
Details
Ensure your data security with CASA, preventing threats and increasing consumer trust.
Details
At DEKRA, we guide our customers through the FIPS 140-3 certification process, performing validation testing and providing timely and professional support.
Details
DEKRA's private certification scheme provides a framework for certifying cryptographic modules, offering transparency to users and stakeholders.
Details
Cybersecurity Evaluations and Certifications for a Safe, Secure and Reliable Future.
Details