07/10/2025
Press release
Almond / Amossys ITSEF obtains EUCC accreditation at Substantial and High levels
Sèvres, October 7, 2025 – One year after the launch of its Security Evaluation & Analysis Lab (SEAL) – a cybersecurity technical laboratory combining the expertise of Almond’s Analysis Division and the Information Technology Security Evaluation Facility (ITSEF) operated by Amossys – Almond announces the official approval of its EUCC certification scheme accreditation by ANSSI.
Accredited as a ITSEF since 2011 by ANSSI, Amossys is among the few French laboratories authorized to assess the cybersecurity of software and network equipment (such as firewalls, secure messaging applications, etc.) under both the French CSPN scheme (Certification de Sécurité de Premier Niveau) and the international Common Criteria (CC) scheme, at one of the highest evaluation levels.
A unified European certification framework
With the Cybersecurity Act (CRA) adopted in 2019, the European Union set out to establish a clear cybersecurity certification framework at the European level to harmonize existing schemes and create a consistent set of methodologies.
As a result, in January 2024, the European Commission announced the adoption of a new certification scheme: the EUCC (Common Criteria-based European Cybersecurity Certification scheme).
The EUCC now serves as the unified reference framework for conducting Common Criteria evaluations and certifications in Europe, replacing all national implementations based on the SOG-IS agreement.
Security product certification — for both software and hardware — under the Common Criteria will therefore continue through the EUCC, at the Substantial and High assurance levels.
EUCC accreditation at Substantial and High levels: a key milestone for our ITSEF laboratory
Our ITSEF evaluation laboratory, already accredited for assessments under the CSPN and Common Criteria schemes, has now obtained EUCC accreditation at the Substantial and High levels.
This accreditation represents a major step forward:
- It confirms our technical expertise and commitment to quality,
- It positions us among the first laboratories in France and Europe capable of conducting evaluations under the new EUCC European scheme,
- It enables us, starting today, to support manufacturers and suppliers as the Cyber Resilience Act comes into effect — an initiative that will rely on these European certification mechanisms to strengthen the cybersecurity of digital products.
Thanks to this recognition, we are helping our clients navigate new European regulatory challenges, ensuring robust, recognized evaluations that are fully aligned with future CRA requirements.
Would you like to learn more about the EUCC or certify one of your products? Contact our team:
ALMOND, together with AMOSSYS, forms an independent French group specialized in cybersecurity.
With 450 experts based in France and Switzerland, and international service centers ensuring 24/7 operations, ALMOND anticipates emerging threats and offers end-to-end solutions to address all its clients’ cybersecurity challenges — including anticipation, protection, detection, response, recovery, and governance.
Recognized for its contributions to innovation and regulatory developments, Almond plays an active role in strengthening France’s and Europe’s strategic autonomy in the field of cybersecurity.
