{
  "url": "https://openlegislation.uk/eu-decision-2016-650/annex",
  "json_url": "https://openlegislation.uk/eu-decision-2016-650/annex.json",
  "legislation": "eudn/2016/650",
  "legislation_title": "Commission Implementing Decision (EU) 2016/650 of 25 April 2016 laying down standards for the security assessment of qualified signature and seal creation devices pursuant to Articles 30(3) and 39(2) of Regulation (EU) No 910/2014 of the European Parliament and of the Council on electronic identification and trust services for electronic transactions in the internal market (Text with EEA relevance)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2016-650",
  "path": "annex",
  "kind": "annex",
  "number": null,
  "heading": "LIST OF STANDARDS REFERRED TO IN ARTICLE 1(1)",
  "text": "ISO/IEC 15408 — Information technology — Security techniques — Evaluation criteria for IT security, Parts 1 to 3 as listed below:\nISO/IEC 15408-1:2009 — Information technology — Security techniques — Evaluation criteria for IT security — Part 1. ISO, 2009.\nISO/IEC 15408-2:2008 — Information technology — Security techniques — Evaluation criteria for IT security — Part 2. ISO, 2008.\nISO/IEC 15408-3:2008 — Information technology — Security techniques — Evaluation criteria for IT security — Part 3. ISO, 2008,\nand\nISO/IEC 18045:2008: Information technology — Security techniques — Methodology for IT security evaluation,\nand\nEN 419 211 — Protection profiles for secure signature creation device, Parts 1 to 6 — as appropriate — as listed below:\nEN 419211-1:2014 — Protection profiles for secure signature creation device — Part 1: Overview\nEN 419211-2:2013 — Protection profiles for secure signature creation device — Part 2: Device with key generation\nEN 419211-3:2013 — Protection profiles for secure signature creation device — Part 3: Device with key import\nEN 419211-4:2013 — Protection profiles for secure signature creation device — Part 4: Extension for device with key generation and trusted channel to certificate generation application\nEN 419211-5:2013 — Protection profiles for secure signature creation device — Part 5: Extension for device with key generation and trusted channel to signature creation application\nEN 419211-6:2014 — Protection profiles for secure signature creation device — Part 6: Extension for device with key import and trusted channel to signature creation application",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2016/650/annex",
    "retrieved_at": "2026-11-01T15:13:59.244026+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}