News

SGS Brightsight France is now publicly listed by ANSSI, the French National Cybersecurity Agency, as an evaluation laboratory undergoing licensing. ​This public listing marks a milestone for the Meyreuil laboratory's Common Criteria/EUCC, CSPN and post-quantum cryptography evaluation capabilities.

From 11 September 2026, the first reporting obligations under the EU Cyber Resilience Act become applicable. For manufacturers of products with digital elements, this means being ready not only to identify reportable vulnerabilities and incidents, but also to act within strict deadlines.

Brightsight’s Meyreuil laboratory is now authorized to perform eSecCPACE security evaluations for CPACE payment applications, expanding its payment security portfolio with specialized testing capabilities and expert guidance throughout the certification process.

Brightsight has achieved ISO/IEC 17065 accreditation from the Dutch Accreditation Council (RvA) for CRA Module B, marking a major milestone in the company's journey toward becoming a designated Notified Body under the European Union's Cyber Resilience Act.

Brightsight's laboratory in Guangzhou, China, has completed the security evaluation of the Topwise T6, the first payment terminal based on MediaTek's MT8786P system-on-chip to achieve PCI PTS POI v7 approval from the PCI Security Standards Council (PCI SSC).

Brightsight is progressing through the accreditation process towards becoming a CRA Notified Body for Module B and Module H. Discover what these conformity assessment routes mean for your products and how early preparation can support a smoother conformity assessment journey.

The Cyber Resilience Act (CRA) and Digital Markets Act (DMA) are helping define a new era for Europe's digital market, where trust is no longer optional. Learn how independent assurance contributes to security, confidence, and sustainable innovation.

Brightsight becomes a PSA Certified Certification Body, enabling in-house certification and a more efficient approach to IoT security certification with combined PSA and SESIP certification services.

Singapore expands IoT cybersecurity cooperation with Japan and South Korea through separate arrangements, supporting cross-border market access and reducing duplicate certification efforts.

Key insights from the OCP EMEA Pre-Summit Cybersecurity Workshop on how industry-driven frameworks such as the OCP S.A.F.E. can support CRA compliance across open compute infrastructure.