Full Drive Encryption iTC Update (C23d)
Provide an update for the v3.0 updates to the Collaborative Protection Profiles for Full Drive Encryption (FDE). The update will include topics such as CC:2022... Read More
Updating the DBMS cPP for Tomorrow: Because 2020 Was a While Ago (C23c)
The DBMS iTC is pleased to announce the first major revision of the cPP since 2020. This talk will present the most impactful updates to... Read More
HCD iTC 2026 Update: Aligning Regulation and Procurement (C23b)
HCD iTC released cPP v1.1 in December 2025 to support the CC:2022 transition. HCD cPP v2.0, planned for June 2026, aligns with CNSA 2.0, CC:2022... Read More
Biometric Security iTC Status Update (C23a)
This talk will be an update on work of the Biometrics iTC since the last ICCC. The topics covered will include: • Updates to the... Read More
Common Criteria (CC)—Maintenance and Development (B23a)
In 2022, the new ISO/IEC 15408:2022 series and ISO/IEC 18045:2022 as well as the corresponding CCRA version CC/CEM:2022 were successfully finished and published, providing improved... Read More
Technical Domain Software‚ Our Activities and Way Forward (A23a)
The Technical Domain Software focus on attack methods, attack potential and minimum tooling in the domain of software evaluation. One of the presenters’ goals as... Read More
A Harmonised Approach to CC Competency: Progress on the CCTQ Framework for Evaluators and Certifiers (C22c)
This talk outlines the progress of CCDB’s “Professionalising CC Training and Qualification for Evaluators and Certifiers” Working Group proposal for a harmonised Common Criteria Training... Read More
Common Criteria Certification—Looking at Technical and Legal Requirements and Sustainability (C22b)
CC Certification (under EUCC scheme) has been made mandatory by several national legislations, especially in the area of identity documents, critical infrastructure or national security... Read More
Little Brother Is Watching—Post Certification Monitoring in Canada (C22a)
Certifications have always been a snapshot in time. Given the rapid advance in technology, products that were “secure” months ago no longer are. To keep... Read More
Bridging the Gap: Vulnerability Management in NIAP CCEVS and the EU CRA (C21c)
Since the European Union’s Cyber Resilience Act (CRA) emerged as a key cybersecurity regulation in Europe, many U.S.-based vendors pursuing Common Criteria (CC) certifications are... Read More