
For many ICT product and service developers, Common Criteria (CC) certification is where good products go to slow down. Costs escalate, timelines slip, requirements shift, and teams find themselves reacting instead of executing. Yet CC remains a critical gateway to global markets—especially as new frameworks like EUCC and regulations such as the Cyber Resilience Act (CRA) reshape the certification landscape. CC Action Plan Day is a hands-on, pre-conference workshop designed to fix that problem. Held the day before ICCC, this intensive, practitioner-focused program is built specifically for product teams navigating CC certification in the real world. It goes beyond theory and policy to focus on execution: how to scope a certification correctly, how to control costs before they spiral, how to survive evolving Protection Profiles and scheme interpretations, and how to meet rising expectations for vulnerability analysis under AVA_VAN.