Source: OJ L 333, 27.12.2022, p. 80–152
Recital 80 Standards in lieu of cybersecurity certification schemes
For the purpose of demonstrating compliance with cybersecuritymeans cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; risk-management measures and in the absence of appropriate European cybersecuritymeans cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; certification schemes adopted in accordance with Regulation (EU) 2019/881 of the European Parliament and of the Council(18)Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (OJ L 151, 7.6.2019, p. 15)., Member States should, in consultation with the Cooperation Group and the European Cybersecuritymeans cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; Certification Group, promote the use of relevant European and international standardsmeans a standard as defined in Article 2, point (1), of Regulation (EU) No 1025/2012 of the European Parliament and of the Council(^29^);Regulation (EU) No 1025/2012 of the European Parliament and of the Council of 25 October 2012 on European standardisation, amending Council Directives 89/686/EEC and 93/15/EEC and Directives 94/9/EC, 94/25/EC, 95/16/EC, 97/23/EC, 98/34/EC, 2004/22/EC, 2007/23/EC, 2009/23/EC and 2009/105/EC of the European Parliament and of the Council and repealing Council decision 87/95/EEC and Decision No 1673/2006/EC of the European Parliament and of the Council (OJ L 316, 14.11.2012, p. 12). by essential and important entitiesmeans a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations; or may require entitiesmeans a natural or legal person created and recognised as such under the national law of its place of establishment, which may, acting under its own name, exercise rights and be subject to obligations; to use certified ICT productsmeans an ICT product as defined in Article 2, point (12), of Regulation (EU) 2019/881;, ICT servicesmeans an ICT service as defined in Article 2, point (13), of Regulation (EU) 2019/881; and ICT processes.