Brightsight accredited by the Dutch National Accreditation Council as EUCC Certification Body.
We are thrilled to announce that Brightsight CB has been accredited as a Certification Body (CB) for the Common Criteria-based cybersecurity certification scheme (EUCC) by the Dutch National Accreditation Council, Raad voor Accreditatie (RvA). Brightsight’s facility in Delft, the Netherlands will soon be an official Conformity Assessment Body (CAB) authorized to perform independent certification activities under the EUCC scheme.
Within the EUCC scheme, Brightsight CB can certify the ICT products for the assurance levels Substantial and High up to EAL5+ within the following technical domains:
Smartcards and similar devices Hardware devices with security boxes Generic software and network products (up to AVA_VAN.3)
Brightsight CB conforms to the EN ISO/IEC 17065 requirements, operates independently of Brightsight ITSEF and fully meets the impartiality criteria.
Certification process
While the ITSEF (lab) performs the evaluation activities and delivers an Evaluation Technical Report (ETR) with verdicts on the conformance of the evaluated product, the CB will review the evaluation results and confirm those verdicts, making a certification decision that leads to the issuance of an EUCC certificate. All certificates are listed on a dedicated CB webpage on brightsight.com (see here).
Our certification process is clear and independent, ensuring that every decision is made fairly and without bias. It consists of:
- submission of an application form and security target.
- evaluation carried out by a lab (can be Brightsight ITSEF or any other EUCC-authorized lab), with evidence and deliverables reviewed in multiple evaluation meetings.
- technical review and assessment by the Certification Body (CB), including a new certification report and certificate.
Why Brightsight
By realizing your EUCC certification with Brightsight, you benefit from:
- Predictable certification processes
- Fair and impartial decisions
- Responsive and transparent communication
- High-quality independent services driven by integrity
What makes Brightsight different
- All under one roof: independent lab and certification services, integrated for your convenience (seamless collaboration between CB and ITSEF).
- Efficient communication and knowledge sharing, leading to faster and more reliable certification outcomes.
Interested?
Are you an ICT supplier who wishes to certify and so showcase proof of assurance of your ICT product such as chips, smartcards, hardware and software? Or do you want to know how to achieve your product’s compliance? At Brightsight, a recognized laboratory performing security evaluations of ICT products and a licensed Certification Body, you will get a smooth certification journey. Our decades of experience in IT security evaluations for 50+ schemes and standards, combined with a deep understanding of Common Criteria and EUCC, enable us to navigate your challenges efficiently and effectively, and in a structured and predicable manner.
Contact us for more details – our experts are ready to assist you.
Enjoyed this article?
Learn more about the EUCC here.
Stay up-to-date with our news, updates and latest developments by following us on LinkedIn.
Don't miss any of our news, updates and latest developments - subscribe to our newsletter.
The Brightsight Bulletin
Subscribe today to stay-up to date with the latest cybersecurity news, trends and regulatory developments from across the payment, internet of things, medical, automotive, industrial, government, telecommunication and network or integrated circuit sectors.
Receive expert insights on cybersecurity testing and certification, upcoming events, and webinars tailored for manufacturers and developers of chip-based devices.
