Join the Global Forum on the Changing Future of Cross-Border Certification

The 2020 International Conference on the EU Cybersecurity Act has been developed to help standards community prepare for the evolution of risk-based frameworks meant to address market fragmentation in the EU. The EU Cybersecurity Act, now in the early stages of development, will eventually create a wide-ranging, independent European body of cybersecurity regulation as part of the “single digital market” goal. This landmark regulatory mandate will have a wide-ranging effect on the international standards community—now is the time to begin planning for and participating in ongoing changes.

A Survey of Current Frameworks and Candidate Schemes

The Cybersecurity Act will establish a European cybersecurity certification framework for ICT products, services and processes. Current schemes may be incorporated into this new framework, or may need to evolve to the fit the regulatory changes. The Conference will cover the potential effect on current schemes and regulatory mandates like Common Criteria, eIDAS, Payment Services Directive 2, GDPR, ISO 27001, and EU standards for cryptographic modules. The conference will also cover the effect on current private schemes like GSMA, GlobalPlatform, EMVCo, PCI PTS, PCI SPoC, Eurosmart, Felica, Mifare, and OWASP and will discuss the new potential candidate schemes for key industry verticals such as IoT, cloud, communications, payments, automotive, and more.

Two Days to Cover a Shifting Regulatory Landscape

The conference will take place in Brussels on 2-3 December, starting with a plenary keynote session then breaking into 4 separate tracks covering technology and certification issues, customer requirements, policy, and market issues.

Who Should Attend

Conference topics will be of interest to the entire standards community, including Certification Bodies, Evaluation Laboratories, Researchers, Evaluators, Policy Makers, Product Developers, Sellers and Buyers interested in the specification, development, evaluation, and certification of IT security. The Cybersecurity Act will also affect organizations beyond the EU, including government schemes, testing laboratories, product developers, and technology companies in North America and Asia.