EUCC ISAC – EU Common Criteria – Information Sharing and Analysis Centre

EU COMMON CRITERIA – INFORMATION SHARING & ANALYSIS CENTRE

Empowering Trust in Cybersecurity
Certification

The EU Common Criteria Information Sharing and Analysis Centre is an international non-profit association dedicated to fostering collaboration, harmonisation, and excellence in cybersecurity certification.

Discover our work

Become a member

The EU Common Criteria Information Sharing and Analysis Centre (EUCC ISAC) builds trust and interoperability to create a robust market for certified ICT products in Europe and globally.

Our Mission

The EUCC ISAC acts as a central hub for collaboration between public and private stakeholders, ensuring the effective and consistent implementation of the EU Common Criteria (EUCC) certification scheme. It provides essential input to key entities – including the ECCG subgroup for EUCC maintenance (EsEm), the European Commission, ENISA, and Member States – to support the ongoing development and maintenance of the EUCC scheme. We aim to maintain state-of-the-art practices by providing technical interpretations, methodologies, attack quotations, and an up-to-date attack catalogue.

View our technical domains →

Who We Are

The EUCC ISAC functions as a structured and inclusive platform, comprising Technical Groups that address various technical domains and foster engagement among a diverse range of stakeholders, including:

National Cybersecurity Certification Authorities (NCCAs)
Conformity Assessment Bodies (CABs)
ICT Manufacturers and Providers
Laboratories and IT Security Evaluation Facilities (ITSEFs)
End-User Organizations
Observers or invitees: Non-European certification authorities and consortia

EUCC ISAC Members →

What We Do

A clearer, aligned card system keeps the existing content while making each activity easier to scan.

Harmonization of Practices

Ensure consistency in implementing the EUCC scheme across Europe.

Protection Profiles

Support the development and maintenance of PPs to align with certification needs.
.

State-of-the-Art

Deliver attack quotations and maintain an up-to-date attack catalogue to address current and emerging threats.

Capacity Building

Offer training programs to onboard and empower stakeholders in the certification ecosystem.

Technical expertise

Provide methodologies, interpretations, and resources to maintain certification at the forefront of technological advancements.

Collaboration & Innovation

Facilitate cooperation among certification bodies, national authorities, private companies, and other global organizations.

OUR PRINCIPLES

Our Values

The EUCC ISAC is founded on a set of core values that promotes trust, cooperation to developp the highest standards in cybersecurity certification.

• Transparency

We uphold inclusive and open processes, ensuring all members have access to information and the opportunity to contribute meaningfully.

• Fairness

Our structure guarantees equal opportunities for participation, fostering balanced contributions from diverse stakeholders.

• Inclusiveness

The ISAC is accessible to a broad range of actors, from small and medium-sized enterprises (SMEs) to large corporations, ensuring diverse perspectives and expertise are represented.

• Consensus-Driven

We prioritize decision-making through agreement, encouraging collaboration and mutual understanding across all members.

• Trust and Confidence

We cultivate a culture of openness and collaboration, where all stakeholders are empowered to contribute to the scheme’s maintenance and evolution in a constructive and transparent manner.

• Accountability

The ISAC adheres to strict antitrust, anti-corruption principles and IP rights policy, with robust mechanisms for addressing complaints, appeals, and ensuring fairness.

LATEST INSIGHTS

News and Events

View all publications

We are hiring: Junior Cybersecurity Certification Engineer

EUCC ISAC is looking for a Junior Cybersecurity Certification Engineer to support its Executive Secretariat and contribute to the coordination of technical work across the European cybersecurity certification ecosystem.This full-time professional immersion opportunity is based [...]

EUCC ISAC Elects its First Steering Committee at the 2026 General Assembly

The members of EUCC ISAC have elected the Association’s first Steering Committee during its first Ordinary General Assembly, marking an important milestone in the development of the organisation’s governance. The newly established Steering Committee reflects [...]

EUCC ISAC Software Technical Domain – Call for volunteers

Call for Volunteers The EUCC ISAC Software Technical Group is launching its activities and invites volunteers to participate in its activities that will be operated through subgroups. The Technical Group focuses on evolving methods and [...]