2026 CC Statistics Report: A Market Redefined by Regulation and Innovation (B13c)
The Common Criteria (CC) ecosystem is undergoing a period of significant transformation, shaped by regulatory developments, technological shifts, and evolving industry priorities. In this talk, the presenters introduce the 2026 CC Statistics Report, based on global certification data collected through the CCScraper tool. Beyond providing an overview of key figures—such as certifications by laboratories, vendors, regions, and assurance levels—this year’s report focuses on understanding the drivers behind the data. Following the rollout of EUCC in 2025, 2026 offers the first opportunity to assess its impact once the transition phase has effectively concluded. The presenters analyze whether EUCC has influenced certification volumes, altered regional dynamics, or contributed to further fragmentation in the global CC landscape. In parallel, manufacturers are increasingly prioritizing compliance with new European regulations, particularly the Cyber Resilience Act (CRA). the presenters explore whether this shift is affecting certification activity and whether emerging requirements—such as machine-readable SBOMs or data minimization—are beginning to appear in certified products. Additional factors, including the rise of AI-based systems, new cryptographic approaches, and evolving product categories, are also considered as potential drivers of change. By combining quantitative data with contextual analysis, this talk aims to identify key trends, highlight early signals, and provide a clearer view of where the Common Criteria ecosystem is heading.