The European Union Agency for Network and Information Security (ENISA) published а study ‘Overview of the ICT Certification Laboratories practices in Europe’ which seeks to identify and analyse the current landscape of Information and Communication Technology (ICT) security certification laboratories within the EU Member States.
Certification plays an important role in raising the level of trust and security in ICT products and services.
The current legal framework for certification labs is structured as follows:
General requirements defined in the Regulation (EC) No 765/2008 of the European Parliament and of the Counci;
Member State level requirements from relevant accreditation bodies;
Certification or evaluation requirements from various standards;
Requirements emerging from international arrangements.
The study concludes that most laboratories currently operate under their respective Member State schemes.
By evaluating additional non-EU laboratories, the report goes one step further and identifies relevant patterns, similarities and differences.
Source: ENISA