Taking too long? Close loading screen.
General

Consultation on Candidate Cybersecurity Certification Scheme (GEN – 1136.00)

07 July 2020

2 min read
2020 - Consultation on Candidate Cybersecurity Certification Scheme
General

Consultation on Candidate Cybersecurity Certification Scheme (GEN – 1136.00)

07 July 2020

2 min read

GEN – 1136.00. The sensitivity of the connectivity of appliances and equipment to cyberattacks has been mentioned in various meetings and seminars. The European Union has established a European Union Agency for Cybersecurity (ENISA) that has been looking at this issue for over 20 years, initially focussing on the financial sectors. Since last year it has been drawing up cybersecurity certification schemes. How much these schemes will extend to HVACR equipment is not yet known.

Risks

The connectivity of equipment is increasing and proliferating. While the hacking of equipment is relatively infrequent and often serves as a route to access financial accounts on should not underestimate the effects an attack might have on technical systems.

Even though the past years the risks were brought to the attention of the HVACR industry in meetings, seminars and events limited efforts have been made within the HVACR industry to deal them.

Cybersecurity certification

A European level the cybersecurity regulation 526/2013 appeared seven years ago. Meanwhile the Commission has sought to harmonise the different cybersecurity certification policies in the member states with the aim to speed up the secure development of European ICT infrastructures and services.

The updated Cybersecurity Act (Regulation 2019/881) itself introduces an EU-wide cybersecurity certification framework for ICT products, services and processes. Companies doing business in the EU will benefit from having to certify their ICT products, processes and services only once and see their certificates recognised across the European Union.

Consultation until 31 July 2020

The European Union Agency for Cybersecurity, ENISA, has opened a public consultation for interested parties to share feedback on the draft of the Common Criteria based European cybersecurity certification scheme (EUCC) (https://www.enisa.europa.eu/publications/cybersecurity-certification-eucc-candidate-scheme/). This draft is extensive and contains 280 pages written largely with cybersecurity experts in mind.

Application of cybersecurity certification in HVACR

Today, it is difficult to assess in how far such certification schemes would extend to the HVACR industry. It is possible that such certification would in future be required by certain customers.

Recommended Actions

The associations and manufacturers dealing with the cybersecurity aspects of the connectivity of equipment may be encouraged to participate to this consultation.

Product Groups should consider, at a general level, the issue of cybersecurity.

Related documents and links

All related documents and articles can be found in the respective sections in the right sidebar.

Downloads

01 September 2022
  • General
The Green Cooling Summit 2022 will take place on 13-14 September 2022, virtually. This year’s focus will be on Green Cooling in Supermarkets, and all interested Members are invited.
1 min read
31 August 2022
  • General
The August edition of the SRI newsletter has just been released. The SRI is now tested in 6 member states, Finland and Croatia are joining Austria, Czech Republic, Denmark and France which had already made this decision a few months ago. ...
2 min read
04 August 2022
  • General
In cooperation with Orgalim, the Eurovent Team provides you with an overview on all European legislative developments of relevance to the HVACR sector. The Bulletin provides a compendium allowing the industry to assess the status quo....
25 min read
29 July 2022
  • General
On a monthly basis, the Eurovent Team compiles a global overview of the latest developments concerning new standardisation activities, technical regulations and legislative developments of relevance for the HVACR industry.
5 min read
Search
Click on 'SUBMIT' or press enter to start search.

Newsletter

Are you interested in receiving regular updates from Eurovent? These include, for instance:

  • EU legislation and standards
  • Important WTO notifications
  • Market intelligence and statistics
  • National initiatives and actions by our Member Associations
  • Technological developments
  • Trade shows and conferences

Do you have any questions or are you interested to place your organisation’s advertisement in the next edition of CLIMANOVELA? Feel free to contact us via secretariat@eurovent.eu or +32 466 900 401.

Log in

Don't have a Eurovent Extranet account? Register here!
Username
Password

Forgot your password?