Ehdotuksen tiedot

Tunnus:prEN 40000-10
Julkaisija:CEN
Komitea:CEN/TC 224
Komitean nimi:Personal identification and related personal devices with secure element, systems, operations and privacy in a multi sectorial environment
Lausuntokierros alkanut:2026-05-24
Lausuntopyynnön määräaika:2026-07-23
Toimialayhteisö:SFS Suomen Standardit
Vastuuhenkilö:janne.kalli(at)sfs.fi
Ehdotuksen soveltamisala:
This document specifies cybersecurity requirements and associated assessment requirements for identity management systems that qualify as products within the meaning of Regulation (EU) 2024/2847. Such products are classified as important products (class 1) according to the implementing regulation Commission Implementing Regulation (EU) 2025/2392.
 
This document covers:
- general description of the product belonging to that category and the product and/or components such product with digital elements; 
- description of their use case; 
- security analysis; 
- definition of applicable risk profiles to be considered for these product with digital elements; 
- applicable cybersecurity requirements for each risk profile; 
- applicable cybersecurity assessment and test requirements for each risk profile.
 
Product not in the scope of this document:
- chip, Embedded OS, Applets; 
- PKI products; 
- cyber security products needed for securing IT infrastructures (VPN, SIEM….); 
- all products that are classified as default such as the anti-fire detectors products. 

Rekisteröidyttyäsi Lausuntopyyntöpalvelun käyttäjäksi voit lukea standardiehdotuksia ja kommentoida niiden sisältöä.

Kun haluat kommentoida lukemaasi tekstiä, valitse Lue ehdotus ja anna muutosehdotuksesi kohdassa Jätä kommentti.

Voit myös kertoa mielipiteesi standardiehdotuksesta kokonaisuutena. Ota kantaa siihen, hyväksytkö standardiehdotuksen vahvistamisen standardiksi.