Eurosmart

📢🔐 New Updates to the EUCC Certification Scheme: Eurosmart welcomes ongoing efforts to improve the EUCC certification scheme. The digital security industry advocates for stronger international recognition, smoother transitions, and a more dynamic update process. While the new proposal addresses key concerns, areas like post-2027 certification under CCRA, transition to CC:2022, and the list of recommended PPs still require further attention to stay aligned with global standards. 👍 Eurosmart is ready to collaborate for an even more secure digital Europe! #Cybersecurity #EUCC #DigitalSecurity #Innovation

🚨 𝗟𝗼𝘄 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝗻 𝘁𝗵𝗲 𝗘𝘂𝗿𝗼𝗽𝗲𝗮𝗻 𝗗𝗶𝗴𝗶𝘁𝗮𝗹 𝗜𝗱𝗲𝗻𝘁𝗶𝘁𝘆 𝗪𝗮𝗹𝗹𝗲𝘁: 𝗔𝗻 𝗨𝗻𝗮𝗰𝗰𝗲𝗽𝘁𝗮𝗯𝗹𝗲 𝗥𝗶𝘀𝗸 𝗳𝗼𝗿 𝗖𝗶𝘁𝗶𝘇𝗲𝗻𝘀 𝗮𝗻𝗱 𝗕𝘂𝘀𝗶𝗻𝗲𝘀𝘀𝗲𝘀 Without strict requirements for the rigorous assessment of the EUDI Wallet hardware component’s resistance to skilled attackers, there can be no assurance that the private keys stored in the wallet will remain secure from compromise or theft. ⚠️ 𝗞𝗲𝘆 𝗥𝗶𝘀𝗸𝘀: - Vulnerability of private keys to hacking and theft, putting personal data at risk. - Nation-state and terrorist actors could exploit these weaknesses. - Potential for large-scale impersonation attacks, financial fraud, and identity theft. - Corporate espionage, supply chain infiltration, and even election manipulation could result from these flaws... 🔐 𝗨𝗿𝗴𝗲𝗻𝘁 𝗔𝗰𝘁𝗶𝗼𝗻 𝗡𝗲𝗲𝗱𝗲𝗱: to protect citizens' privacy and prevent widespread digital identity fraud: Private keys must be protected with Hardware EUCC or SOGIS certified at EAL4+ AVA_VAN5 level Let’s ensure that the future of EU's digital identities is safe for all. #CyberSecurity #eIDAS #DigitalIdentity #EUDI #wallet #EUCC #CyberRisk #Eurosmart

🔐 𝗡𝗼 𝗘𝗨 𝗗𝗜 𝗪𝗮𝗹𝗹𝗲𝘁 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗮𝗻𝗱 𝗣𝗿𝗶𝘃𝗮𝗰𝘆 𝗪𝗶𝘁𝗵𝗼𝘂𝘁 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗲𝗱 𝗦𝗲𝗰𝘂𝗿𝗲 𝗛𝗮𝗿𝗱𝘄𝗮𝗿𝗲 🔐 𝗧𝗵𝗲 𝗱𝗶𝗴𝗶𝘁𝗮𝗹 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝗻𝗱𝘂𝘀𝘁𝗿𝘆 𝗶𝘀 𝗿𝗮𝗶𝘀𝗶𝗻𝗴 𝘀𝗲𝗿𝗶𝗼𝘂𝘀 𝗰𝗼𝗻𝗰𝗲𝗿𝗻𝘀 𝗼𝘃𝗲𝗿 𝘁𝗵𝗲 𝗹𝗮𝗰𝗸 𝗼𝗳 𝗮𝘁𝘁𝗲𝗻𝘁𝗶𝗼𝗻 𝘁𝗼 𝘀𝗲𝗰𝘂𝗿𝗲 𝗵𝗮𝗿𝗱𝘄𝗮𝗿𝗲 𝗶𝗻 𝘁𝗵𝗲 𝗹𝗮𝘁𝗲𝘀𝘁 𝗘𝗨𝗗𝗜 𝗪𝗮𝗹𝗹𝗲𝘁 𝗶𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁𝗶𝗻𝗴 𝗮𝗰𝘁𝘀. Ensuring the security of core components is more critical than ever. 🆔 No shortcuts. Just strong security for every citizen! 👉 𝗪𝗲 𝗻𝗲𝗲𝗱 𝗘𝗨𝗖𝗖 𝗘𝗔𝗟𝟰+ 𝗔𝗩𝗔_𝗩𝗔𝗡.𝟱 𝗰𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗳𝗼𝗿 𝘁𝗵𝗲 𝗪𝗮𝗹𝗹𝗲𝘁 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗖𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗗𝗲𝘃𝗶𝗰𝗲 (𝗪𝗦𝗖𝗗) to protect the wallet's most sensitive parts and ensure a unified, secure, and interoperable digital identity across Europe. Strong cybersecurity measures are not optional—they are essential to safeguarding personal data and making the EUDI Wallet a success. 🔒 #Certification #Cybersecurity #EUDIWallet #Eurosmart #SecurityStandards #DataPrivacy #EIDAS

🔐 Europe should be at the forefront of post-quantum cryptography! As quantum computing advances, our current cryptographic methods face unprecedented challenges. Eurosmart is pushing for Europe to adopt quantum-safe algorithms, ensuring our digital security remains unbreakable in the quantum era. Let's secure our future with cutting-edge cryptography! Eurosmart's key recommendations: 👉 Mandate European institutions to implement mitigation plans. 👉 Support initiatives by European Standardisation Organisations to integrate PQC. 👉 Set up dedicated PQC pilot projects for key infrastructures. 👉 Activate expert groups for political and technical guidance. 👉 ENISA to release guidelines for PQC implementation. 👉 Maximize EU influence in global cryptographic forums. https://lnkd.in/eRT5j6GJ #PQC #CyberSecurity #QuantumComputing #DigitalSecurity #Innovation #Eurosmart

🔒 Navigating the EU Cybersecurity Regulatory Landscape with Ease! 🔒 In the ever-evolving digital landscape, staying compliant with the myriad of cybersecurity regulations can be difficult. That's where Eurosmart comes in. We've meticulously mapped out key EU cybersecurity regulations, providing straightforward analyses and clear implementation timelines to help industry stakeholders seamlessly navigate and adhere to these critical rules. Our comprehensive document covers essential regulatory areas, including: 👉 Cybersecurity: Understanding the #CSA Cybersecurity Act, Cyber Solidarity Act, and more. 👉 Market Surveillance and Access: Insights into the #CRA Cyber Resilience Act and the #AI Act. 👉 Data Protection: Navigating the #GDPR and the European #DataAct. 👉 Digital Platforms and Competition: Breaking down the Digital Markets Act. e-Commerce and Consumer Protection: Exploring the Digital Services Act. 👉 Digital Identity: Detailed overview of the European Digital Identity Framework (#eID #eIDAS). 👉 Digital Industrial Policy: The importance of the #EuropeanChipsAct. 🔗 Stay ahead of the curve with Eurosmart. Our initiatives ensure that stakeholders in the digital industry have the tools and information they need to understand and contribute to the evolving cybersecurity rules and stay competitive in the European market ! #Cybersecurity #EURegulations #DigitalIndustry #CRA #CSA #DataProtection #DigitalTransformation #Eurosmart

🌟 Eurosmart Celebrates Legislative Milestones! 🌟 Eurosmart welcomes the adoption of the Cyber Resilience Act and the Artificial Intelligence Act by the European Parliament! 🎉 These significant legislative achievements mark a pivotal moment in bolstering cybersecurity measures for digital products in the EU market and in promoting ethical AI development across the European Union. “Advocating for innovation and security, Eurosmart is committed to supporting the implementation of the Cyber Resilience Act and the Artificial Intelligence Act,” said John Boggie, President of Eurosmart. "We're dedicated to working with policymakers, industry partners, and stakeholders to ensure the effective implementation of these acts." Read Eurosmart's press release here: https://lnkd.in/dyZ2JPXd #Cybersecurity #CRA #AIact #EURegulation

Eurosmart welcomes the adoption of the very first EU cybersecurity certification scheme 🌟#EUCC🌟. 🤝 Collaboration is key! #ENISA's crucial role in shaping the scheme, along with the collective effort of stakeholders leveraging the SOG-IS legacy, underscores our commitment to enhancing digital trust. 👉 Now, concrete actions are imperative for EUCC Maintenance. Gathering industry stakeholders, policymakers, national agencies, conformity assessment bodies, and cybersecurity experts is essential for effectively implementing and sustaining the EUCC scheme. Cybersecurity certification is bolstering trust in digital technologies across the continent. Let's continue our collaborative efforts to promote innovation and resilience in the digital era! 💡 #Eurosmart #EUCCScheme #DigitalSecurity #Collaboration #ISAC https://lnkd.in/eDTrybm9

A recent relevant joint ANSSI - Agence nationale de la sécurité des systèmes d'information - Federal Office for Information Security (BSI) release titled "Remote Identity Proofing" provides us with critical insights into the complexities of remote #identity #proofing in our rapidly digitalizing world. Here are three essential elements from the release: - Biometric Verification: This involves confirming the authenticity of the applicant's face representation using high-quality video (minimum 720p). The process includes AI and human verification to ensure the integrity of the facial representation and detect any alterations. - Identity Document Verification: The focus here is on validating the authenticity of the identity document. It encompasses authenticating the document, verifying its data integrity, and confirming the user's possession of the document during the identification process. - Matching and Results: This final step ensures the applicant's face matches the photo on the identity document, employing liveness checks on biometric and document data to confirm the authenticity of the applicant. This comprehensive approach highlights the sophistication required in our digital world to ensure secure and trustworthy identity verification. #RemoteIdentityProofing #Cybersecurity #ANSSI #BSI #eIDAS #eID #EU

Eurosmart's Position on the Cybersecurity Act (CSA) Revision - The importance of maintaining efficient governance Eurosmart, representing the Digital Security Industry, supports the initiative to expand the European Cybersecurity Certification Framework under the Cybersecurity Act. With 25+ years of active involvement, Eurosmart has been a pioneer in Cybersecurity certification in Europe, and has played a pivotal role in shaping the upcoming ‘EUCC,’ Europe’s first cybersecurity certification scheme. The existing CSA approach strikes a balance between security, trust and efficiency, recognizing the importance of time-to-market consideration in scheme development and maintenance. A flexible approach is a prerequisite for swift market adoption. Eurosmart calls for: 1️⃣ Extra control layer for scheme development and maintenance to compromise efficiency 🔥Concerns arise with Amendment 40 from the ITRE Committee, introducing complexity. Eurosmart suggests alternative tools to address political issues specific to the European Cybersecurity Cloud Scheme (EUCS). 🔥Article 49 of ITRE's proposal empowers the European Parliament with additional control, potentially hindering the approval process without commensurate technical value, thereby affecting the overall efficiency. 2️⃣ Existing Safeguards for schemes developments and maintenance 🔥 Eurosmart recognizes existing safeguards in the European Cybersecurity Certification Framework through the European Cybersecurity Certification Group (ECCG) but cautions against overregulation. Coordination between the ECCG and relevant stakeholders is crucial. This coordination can be achieved through the establishment of recognized partnerships with the European cybersecurity certification ecosystem. 3️⃣  Enhancing a trusted ecosystem to support schemes’ adoption and maintenance 🔥 Eurosmart deems an additional control layer non-viable and calls for leveraging the existing trusted ecosystem. Eurosmart proposes harnessing the collective expertise of groups like the Senior Officials Group Information Systems Security (SOGIS), since these expert communities have already made significant contributions. Efforts should focus on organizing and expanding this community through partnerships, particularly the development of an Information Sharing and Analysis Center (ISAC) to accommodate the expanding community and foster a continuous dialogue with public authorities. Read Eurosmart's full position on the CSA revision here: https://lnkd.in/eYXMnciD #CSARevision #cybersecuritygovernance #cybersecurityindustry  #digitalsecurity #CSA

Cyber Resilience Act: Eurosmart's Key comments on the Cyber Resilience Act (CRA) Proposal The European Parliament and Council's proposal on horizontal cybersecurity requirements for digital products is a pivotal step towards fortifying our digital landscape and towards a cyber-resilient European Digital Society. The adoption of risk-based approached by the CRA, taking into account security threats, is a very important step towards standardizing the entire market’s emphasis on security. Eurosmart, as a leading voice in the digital security industry, supports supports the adoption and implementation of such principles within the CRA proposal. Representing the digital security industry in Europe, the members of Eurosmart are at the forefront of pushing the adoption of security principles and are glad to see the adoption of key security concepts already in practice within the high-end security industry and welcome this being adopted in other domains, particularly those security practices where not mandated: 1️⃣ EU cybersecurity certificate to provide presumption of conformity 🔥  Eurosmart would like legislators to acknowledge that schemes created under the CSA should automatically be seen as conformity proof under the CRA without additional efforts or costs for manufacturers. 2️⃣ No certification obligation for high-end security products approved by sectorial schemes 🔥  Certification obligation in the CRA context for all high-end security products will complexify existing high-level evaluation processes. Detailed analysis of Eurosmart's comments: https://lnkd.in/ePK8ec8b #cybersecurityindustry #cyberresilience #CRA #EURegulation #EuropeanDigitalSociety