- Why in news
- On 14 May 2026, MeitY announced that India will chair the Common Criteria Development Board (CCDB) of the CCRA from April 2026 to April 2028. This was confirmed at the CCRA meeting in Tokyo on 14-16 April 2026.
- What it is
- The Common Criteria Recognition Arrangement (CCRA) is an international agreement under which member countries recognise each other's IT security certificates. The certificates are for products evaluated under the Common Criteria standard. The CCDB is its technical body. It manages the work program for the Common Criteria and the Common Methodology for IT Security Evaluation (CEM).
- India's chairship
- India chairs the CCDB from April 2026 to April 2028, a two-year term.
- Meeting
- The chairship was confirmed at the 1st Quarter CCRA meeting in Tokyo, Japan, on 14-16 April 2026.
- What CCDB does
- The CCDB is the technical core of the CCRA. It manages the international work program for the Common Criteria and the CEM.
- India's membership
- India has been a member since 16 September 2013, as a Certificate Authorizing Nation. MeitY and the STQC Directorate act for India, with STQC as the Certification Body.
- Membership size
- The CCRA has 20 certificate-authorizing nations and 18 certificate-consuming nations.
- Mutual recognition
- Certificates from member countries are recognised by the others without re-certification.
Don’t confuse with Authorizing vs consuming nation: Authorizing nations issue certificates. Consuming nations only recognise certificates issued by others. India is an authorizing nation.
Don’t confuse with CCRA vs CCDB: The CCRA is the whole arrangement. The CCDB is its technical body for the standards and evaluation method.
International bodies and relations: the largest group of news questions in Prelims (61 since 2013), often about background, members and location. In Mains, 27 news-triggered questions, mostly on India's interests.
Why it matters
- India gets a say in global IT security evaluation standards, including for emerging technologies.
- Mutual recognition lowers certification costs and helps Indian IT security products reach foreign markets.
Problems
- Indian products and labs must keep meeting international evaluation standards to hold credibility.
Way forward
- Use the chair to push for standards on emerging technologies and to strengthen STQC's evaluation capacity.
Put in your answer
Mutual recognition example: Under the CCRA, one certification is accepted across member countries without re-certification. This is an example of international cooperation on cyber security standards.
UPSC’s own questions that come close to this issue, from our Prelims and Mains banks.
No practice question for this one; the card may still help an answer. Why: India chairs the technical board of an international IT-security arrangement. International bodies are 61 of 327 Prelims questions, but this one is niche.
Worth revising until Prelims 2027: most news questions come within two years of the event.