Common Criteria and EUCC: preparing your certification
You are preparing a certification according to Common Criteria or in the EUCC scheme? We support you with the Security Target and manufacturer documents and coach your team in working with the criteria.
Common Criteria and EUCC: well prepared for certification.
Your situation
Your customers require your product to be certified according to Common Criteria or EUCC?
A tender, a public sector project or a major customer requires a certificate according to Common Criteria (ISO/IEC 15408). Since February 2025, certifications can also be started under the European EUCC scheme (EU cybersecurity certification scheme on Common Criteria) in accordance with Commission Implementing Regulation (EU) 2024/482. It is often unclear which assurance level is required, which parts of the product belong in the evaluation and which manufacturer documents still have to be produced.
For certification you have to provide a number of specific documents, above all the Security Target. This requires experience with the terminology and formal requirements of the criteria.
This is where we come in: with support for the Security Target and coaching for your team. The certification itself is carried out by the BSI.
You are preparing a certification according to Common Criteria (ISO/IEC 15408) or under the European scheme EUCC (EU cybersecurity certification scheme on Common Criteria): we support you with the Security Target and manufacturer documents and coach your team. In a free introductory workshop you see Common Criteria and BSZ side by side in terms of effort and significance.
For certification you need manufacturer documents, above all the Security Target. We support you in writing them or enable your team to apply the criteria itself. The evaluation is a separate step under the independence requirements of the procedure.
01
Introductory or kickstarter workshop
In the free workshop we compare the possible forms of evidence – Common Criteria and BSZ – in terms of approach, effort, cost, significance and benefit.
Once the goal is set, for example because your customers require a Common Criteria certification, we spend one to two days with you in the kickstarter workshop: we analyse all available information, explain the relationships and dependencies of the certification and start working on project results straight away.
Shorter preparation
First project results and a considerably shorter preparation time until the certification starts.
02
Security Target and manufacturer documents
Our support is particularly suited to writing the Security Target. We offer it at different levels.
Alternatively, we train your staff in coaching sessions to apply the criteria themselves. This way you build internal know-how step by step. When deadlines are tight, our team provides additional support.
Our expertise
We support manufacturers in preparing Common Criteria projects: from the Security Target and manufacturer documents to coaching your team. secuvera has been active in IT security since 1988. Our experience includes firewalls, VPN solutions, mobile systems, healthcare products, databases and composite systems.
Getting started
Clarifying product boundaries and the support you need
Describing security functions and product boundaries
We look at which product version and security functions are to be certified and which procedure your customer expects. An existing Security Target and architecture documents show where manufacturer contributions are still missing.
Working through criteria questions in the introductory workshop
In the free technical workshop we can classify questions about the evaluation and the support required. We also clarify where your team needs to build knowledge of the criteria and which roles in the procedure must remain independent.
Product boundaries and procedure clearly defined before the evaluation starts.
Preparation, evaluation and certification are separate
Our consulting prepares the certification. The evaluation is a separate step under the independence requirements of the procedure, and the certification body takes the certification decision. Successful preparation anticipates neither.
Questions about preparing for Common Criteria and EUCC
Does secuvera support you in writing the Security Target?
Yes. Our support is particularly suited to the Security Target. We discuss the existing documents and the support you need. Consulting and the later evaluation are planned according to the independence requirements of the chosen procedure.
Do our developers already need to master the Common Criteria?
Not completely. In coaching sessions we teach your staff how to work with the criteria. This enables them to produce the manufacturer documents themselves step by step. Additional technical support can be agreed if needed.
Is there a less demanding route than full Common Criteria certification?
Yes, depending on the goal. The Accelerated Security Certification (BSZ) of the BSI requires only the product and a Security Target. We clarify which route fits in the free workshop.
