EUCC ISAC GOVERNANCE

Technical Groups Work and Governance

A clear governance structure and specialised technical groups support collaboration, consistency and excellence across the European cybersecurity certification ecosystem.

STRATEGIC DIRECTION

Governance

EUCC ISAC Steering Committee

The Steering Committee is the strategic governance body of the EUCC ISAC. It brings together representatives from National Cybersecurity Certification Authorities (NCCAs), Certification Bodies, Technical Groups and elected industry representatives to guide the Association’s activities and support the maintenance of the European Common Criteria (EUCC) certification ecosystem.

SPECIALISED EXPERTISE

Technical Groups and Domains

The Technical Groups bring together expert communities to develop guidance, interpretations and methodologies for EUCC certification.

TECHNICAL GROUP

Joint Hardware Attack Subgroup (JHAS)

JHAS develops, maintains and continuously enhances the methodology used to assess attack paths in security IC hardware, as well as embedded security firmware and software. It provides guidance on interpreting this rating methodology and monitors the latest advancements in attack techniques.

TECHNICAL GROUP

International Security Certification Initiative (ISCI)

ISCI generates interpretation documents for Common Criteria certification (ISO 15408) of Security IC products. It supports interpretation of the Common Criteria for hardware and software security certifications in the Security IC domain.

TECHNICAL GROUP

Joint Embedded Devices Subgroup (JEDS)

JEDS provides technical input for the evaluation of products built from discrete parts where significant security functionality depends on a physical hardware envelope with counter-measures against direct physical attacks.

TECHNICAL GROUP

CC Framework for Embedded AI

The subgroup develops guidance bridging embedded Artificial Intelligence cybersecurity evaluation with the Common Criteria framework, mapping CC requirements to current standards and accepted work.

TECHNICAL GROUP

Software Technical Group

The Software Technical Group brings together contributors working on certification methods and technical topics related to software products.

FOCUSED COLLABORATION

Ad-hoc Groups

AD-HOC GROUP

PP Management

Focused collaboration on Protection Profile management and maintenance.

AD-HOC GROUP

Vulnerability Analysis

Expert exchange on vulnerability analysis methods and emerging technical issues.

AD-HOC GROUP

Training Program

Capacity building and training activities for the EUCC certification community.