jtsec Applus+ at the XX STIC Conference

Meet jtsec Applus+ at the XX STIC Conference

The XX STIC Conference, organized by the Spanish National Cryptologic Centre (CCN), will be a key opportunity to connect with cybersecurity professionals and organizations, exchange perspectives on the challenges facing the industry and discuss how cybersecurity evaluation and certification can support the development of secure and compliant products. 

As a CCN-accredited cybersecurity laboratory and Platinum Sponsor of this year’s conference, jtsec Applus+ will be there to meet manufacturers, technology providers and other cybersecurity stakeholders, understand their projects and explore how our evaluation and certification expertise can help them address evolving cybersecurity requirements. 

What can we help you with? 

At the XX STIC Conference, we will focus on two major challenges for ICT product manufacturers: accessing the CPSTIC Catalogue and preparing for the Cyber Resilience Act (CRA). 

CPSTIC Catalogue / CCN-STIC 105 

The CPSTIC Catalogue is a reference catalogue for secure ICT products used by the Spanish Public Administration, listing products whose security guarantees have been assessed by the CCN. 

As a CCN-accredited laboratory, jtsec Applus+ supports manufacturers throughout the process, from the cybersecurity evaluation of products and cloud services to their inclusion in the catalogue. Our capabilities include LINCE, CICLÓN, Common Criteria and EUCC, as well as MEMeC evaluations for cryptographic products, MEGA evaluations for random number generators and other complementary STIC evaluations. As co-creators of the LINCE, MEMeC, CICLÓN and MEGA methodologies, we have extensive experience helping manufacturers evaluate their products and work towards inclusion in CPSTIC. 

Cyber Resilience Act 

With the CRA’s main obligations applying from 11 December 2027, manufacturers need to define their compliance strategy in advance. 

Products already evaluated under LINCE, CICLÓN, Common Criteria or EUCC and included, or in the process of being included, in CPSTIC may be able to reuse existing work towards CRA compliance. Our experts can help map existing requirements and identify opportunities to streamline the product conformity process. 

Join our presentations 

We’ll also be hosting a couple of presentations during the conference, where our experts will share their insights on key cybersecurity topics and emerging industry challenges:

• On Wednesday 25 November, José Manuel Pulido will present “Implementing CRA Compliance through National Schemes”, exploring how established Spanish cybersecurity schemes such as LINCE and CICLON could be leveraged to demonstrate compliance with the Cyber Resilience Act (CRA). 
• Also on Wednesday 25 November, Francesca Melià and Cristina Dueñas will present “CPU Jitter: Demystifying Entropy for Software Solutions”, sharing practical insights into the correct implementation of CPU Jitter and how the CCN-MEGA methodology can help make its evaluation more structured, objective and reproducible. 

Come and meet us at the XX STIC Conference. Our team will be ready to learn more about your cybersecurity challenges and discuss how our evaluation, certification and compliance expertise can help you bring secure and trusted products to market.