When EUCC Over-Delivers: A Pilot Study on CRA Alignment for Class I and II Products (B12c)
This talk presents the findings gained while performing a pilot project to explore the interplay between CRA and EUCC. The pilot project explores for important class I and II, what are the gaps between the EUCC certificate of the TOE and the CRA. Three TOEs with different assurance levels: NDcPP v3.0e compliant, EAL2+, and EAL4+ were studied. For important class the presenter and II, the EUCC may already over-ask the assurance level compared to that required by CRA. The study proposed an effective approach to bridge the gap between the EUCC certificate and the CRA essential security requirements.