1. Certification of an ICT product shall be carried out against its security target:
(a)
as defined by the applicant; or
(b)
incorporating a certified protection profile as part of the ICT process, where the ICT product falls in the ICT product category covered by that protection profile.
2. Protection profiles shall be certified for the sole purpose of the certification of ICT products falling in the specific category of ICT products covered by the protection profile.
Compiled from an official source version. Later amendments or repeals may not be reflected; the official text prevails. · Read the official text ↗ · Data as of 2026-07-04
CitationArticle 5 of Commission Implementing Regulation (EU) 2024/482 (LawPlayer, data as of 2026-07-04)
