National Institute of Telecommunications

The International Common Criteria Conference 2026 (ICCC26) took place in Rome from 29 September to 1 October 2026. It is one of the major international meeting points for the community involved in the security evaluation and certification of ICT products.

Common Criteria is an internationally recognised framework for specifying and assessing IT security requirements, reflected in the ISO/IEC 15408 standard. ICCC brings together representatives of public authorities, certification bodies and evaluation laboratories, technology manufacturers and experts involved in developing the standards and methodologies used in certification processes. The conference provides a forum not only for presenting new solutions and experience, but also for discussing the future development of the Common Criteria framework.

IŁ-PIB was represented at this year's conference by Dr. Elżbieta Andrukiewicz and Dr. Piotr Wiśniewski.

As an editor of the ISO/IEC 15408-1 standard, Dr. Andrukiewicz joined other editors in a presentation on the current status of the standard and initiatives aimed at preparing the next edition of the ISO/IEC 15408 and ISO/IEC 18045 standards.

Her second presentation, “The Day after CC/CEM 2026—Start Working Seriously on Terminology”, focused on work towards a new part of ISO/IEC 15408 covering the extensive terminology used within Common Criteria. Consistent and clearly defined terminology is particularly important in a framework used by experts, evaluation laboratories and certification bodies across many countries.

At the same time, from 29 September to 1 October, CEN and ETSI held the workshop “EU Digital Framework centring on the EU Identity Wallet”, dedicated to standards supporting the development of the European Digital Identity Wallet (EUDIW).

The EUDIW is intended to allow EU citizens and residents to securely prove their identity and selected personal attributes when accessing digital services in both the public and private sectors. Common European standards for security, interoperability, testing and certification are therefore a key part of its implementation.

The CEN and ETSI workshop brought together experts working on these solutions, as well as representatives of European institutions, regulators and technology providers. Its programme covered issues including data protection, identity verification, cryptography, wallet testing and certification.

Dr. Elżbieta Andrukiewicz joined the event remotely. During a session devoted to the certification of EU Digital Identity Wallets, she presented the draft standard “Developing and maintaining the risk register for EUDI Wallet implementation and certification”, for which she serves as editor. The document addresses the development and maintenance of the risk register used in the implementation and certification of the European Digital Identity Wallet.

Dr. Elżbieta Andrukiewicz heads the Cybersecurity, Internet Technologies and Applications Department at the National Institute of Telecommunications, as well as its IT Security Evaluation Facility (ITSEF). Her areas of expertise include information security management, cybersecurity evaluation and certification, risk management and standardisation.

For many years, she has been actively involved in international and European standardisation. She is an expert within ISO/IEC JTC 1/SC 27 and an editor of international cybersecurity standards, including ISO/IEC 15408-1 and ISO/IEC 27005. Her work on Common Criteria standards and the security of the European Digital Identity Wallet also illustrates the contribution of IŁ-PIB experts to processes that help shape the European and international framework for assessing the security of digital technologies.