India to Lead Global IT Security Standards as CCDB Chair for 2026-2028

May 16, 2026

April 2028: India's term as CCDB Chair ends.

NODAL AGENCIES IN INDIA

India participates in the CCRA and the CCDB through two main agencies:

Ministry of Electronics and Information Technology (MeitY): The nodal ministry responsible for the overall framework.
STQC Directorate: The Standardisation Testing and Quality Certification (STQC) Directorate acts as the official Certification Body for IT security evaluations in India.

WHY THIS MATTERS FOR INDIA

This leadership position is a big achievement for India. Here is why it is important:

Global Recognition: It shows the world that India has technical competence and commitment to advancing global IT security standards.
Influence Standards: India will be at the forefront of defining international security evaluation methodologies.
Addressing Needs: This ensures that emerging technologies, especially those relevant to India, are properly addressed in the global standards framework.
Strategic Opportunity: The two-year term gives India a chance to influence critical decisions shaping the future of IT security certification worldwide.

THE COMMON CRITERIA RECOGNITION ARRANGEMENT (CCRA)

The CCRA is the foundational international treaty that enables the mutual recognition of IT security certificates across borders. This means that if a product is certified as secure in one member country, other member countries accept that certificate without re-testing. This facilitates seamless international trade in secure IT products. The CCRA currently has 20 certificate-authorizing nations and 18 certificate-consuming nations (total 38 members).

FAQ (FREQUENTLY ASKED QUESTIONS)

Q1: What is the full form of CCDB?
A: Common Criteria Development Board.

Q2: When did India become the Chair of the CCDB?
A: India's two-year term as Chair began in April 2026 and will last until April 2028. The confirmation was made in April 2026.

Q3: Which Indian agency is the national certification body for Common Criteria?
A: The STQC Directorate under the Ministry of Electronics and Information Technology (MeitY).

Q4: How many countries are members of the CCRA?
A: 38 countries – 20 certificate-authorizing nations and 18 certificate-consuming nations.

Q5: When did India become a member of the CCRA?
A: On 16 September 2013, as a Certificate Authorizing Nation.