The State Scientific and Research Institute of Cybersecurity Technologies and Information Protection is developing a national certification system for IT products in accordance with the requirements of the Common Criteria Recognition Arrangement (CCRA), which Ukraine joined at the end of 2025.

The Institute's certification body for products, processes, and services has developed foundational regulatory documents that define approaches to assessing the conformity of IT products. Specifically, a certification scheme and a checklist for EAL2 evaluation have been developed. Work is ongoing to develop the corresponding tools for EAL4.

Implementing these solutions ensures compliance with Resolution No. 373 of the Cabinet of Ministers of Ukraine of 29 March 2006 regarding the conformity assessment of technical and cryptographic information protection measures in information and communication systems.

Implementing Common Criteria approaches contributes to the international recognition of Ukrainian IT products, introduces transparent evaluation procedures, and forms the basis for integrating the national certification system into international practice.