|
Mutual recognition's option
The paper explains “the EU recognises in the Cyber Security Act that supply chains are global and that the introduction of certification schemes should seek to reduce market fragmentation […] It is the UK’s understanding that such arrangements would mean that there is provision within the Act for the UK and the EU to mutually recognise one another’s cybersecurity certification schemes”. Therefore, "The UK will, therefore seek to enter into negotiations with the EU on mutual recognition arrangements."
If no agreement
The paper states that “even if the UK does not engage or develop a mutual recognition approach for a specific EU scheme this will not necessarily preclude UK companies from gaining EU certification for their products or services via an EU member state. This will depend on the conditions set out within each individual scheme”. |