When Agile Meets Assurance: Adapting Common Criteria for 5G Development Realities (A12b)
5G vendors operate on biweekly releases and CI/CD pipelines. Common Criteria was built for a fixed, well-defined TOE. The mismatch is no longer theoretical since January 2026, Germany’s §165 TKG mandates certification for critical 5G components, a national regulatory first with no EU-level equivalent. The result: critical components remaining uncertified and evaluation scopes hard to define. This talk explores how assurance frameworks can adapt to continuous development cycles and opens a community discussion on what labs, regulators, and vendors can do together.