# Cybersecurity certification of IT products and IT services

Material from FMV on certification schemes under the EU Cybersecurity Act

> In November 2024 the Swedish Defence Materiel Administration (FMV) held an information meeting on cybersecurity certification of IT products and IT services. The presentation is listed under References.

Updated: 5 October 2026  
URL: https://sbom.se/en/regulations/cybersecurity-certification

On 15 November 2024 the Swedish Defence Materiel Administration (FMV) held an information meeting on cybersecurity certification of IT products and IT services. The meeting covered certification schemes under the EU Cybersecurity Act and how they relate to NIS2 and the Cyber Resilience Act (CRA). The presentation, in Swedish, is listed under References.

## Certification and the CRA

In the [Cyber Resilience Act (CRA)](https://sbom.se/en/cra/overview), certification matters for products in the stricter classes. For critical products, a European cybersecurity certification scheme is the main route for demonstrating conformity. For important products it is one of the options.

## References

- [FMV: Infomöte om certifieringar](https://www.fmv.se/globalassets/dokument/verksamhet/241115-infomote-certifiering.pdf): Presentation från informationsmöte om certifiering av cybersäkerhet i it-produkter och it-tjänster