State of Play of Security Requirements for EUDI Wallet and Interplay With the EU CSA (Regulation 2019/881) and EU CRA (S12a)
Amongst the first batch of implementing acts of the eIDAS regulation (as amended in 2024) planned for the end of 2024, one will lay down the requirements for the security certification of the EUDI Wallet. It will define the scope, the methodology to apply for security certification as well as the security requirements. It will be the first mandatory cybersecurity certification based on a European certification scheme. This talk explores the interplay of this implementing act with the Cybersecurity Act (CSA – regulation 2019/881), including existing security certification schemes (e.g., EUCC) and the Cyber Resilience Act.