CALL FOR CANDIDATURES • 2025 campaign

Notice of call for labelling candidatures for products, managed services and consulting activities under the France Cybersecurity Label.

The governance committee of the France Cybersecurity label has launched a call for candidatures for labelling of products, managed services and consulting developed by French companies, offers which are oriented toward users and international ordering parties from all sectors in order for them to dispose of secured, tailored and effective cybersecurity solution.

Context

The France Cybersecurity Label answers to several needs and objectives in the priority context of the necessity for our cybersecurity industry to develop exports markets:

• Promote French cybersecurity solutions and increase their international exposure
• Raise awareness among users and international ordering parties regarding the importance of the French origin of a Cybersecurity offer and its intrinsic qualities
• Certify to users and ordering parties that the product and services are commercialized
• Increase their overall use and the security level of users

This label is governed by a tripartite structure consisting of users representatives, industrials representatives and relevant State services.
File Application Modalities

The France Cybersecurity label is awarded to a range of products and services within three areas of activity:

1. Hardware and/or software products
2. Managed services in cybersecurity
3. Consulting, Engineering and Services in cybersecurity

The attribution principles mainly rely on the following criteria:

1. Products and services are provided and/or delivered by a French company,
2. Products are conceived and developed in France,
3. Services are provided from France or hosted in France when appropriate.
4. The quality and performance of products and services are assessed by certifications.

The candidature file application date is set until 25 October 2024 at noon.

The candidature file corresponds, for a company, to a labelling request for a product, a managed service or a consulting activity that meet the prerequisites listed above. In doing so, a company can dispose of several application files and be given, at the end of the procedure, a label for each of its offers engaged in the labelling process.

Each applicant company to the labelling of one or several of its offers must fill an application file which consists of the questionnaire reply as well as the following documents:

• A certificate of incorporation
• The company’s statutes
• A social certificate and a tax certificate
• A fact sheet about the offer submitted for labelling
• A fact sheet about the applicant company / entity / division
• A payment commitment for processing fee

The completed files must be send electronically to the secretariat of the France Cybersecurity Label to the following address [email protected]. An acknowledgement of receipt will be sent to you within 15 days of receipt of your request. If you have not received this acknowledgement of receipt by the end of this period, please contact Elsa Auriol – [email protected] to make the necessary checks.

After the verification of eligibility and the payment of the processing fees, the applicant file will be transferred for investigation to an independent third-party instructor mandated by the governance of the France Cybersecurity Label.

During the instruction phase, the third-party instructor might, after acquainting himself with the whole file of the applicant company, contact the latter for inquiries that will stay within the scope of mission given to the instructor.

Instruction procedure

The instruction and selection procedure is overseen by the France Cybersecurity Label award committee, in particular on the basis of the appraisal report issued by the third-party instructor regarding the applicant’s file.

The instruction procedure will be carried out in three steps:

• a first phase of investigation led by the award committee before and following the receipt of the application file by the applicant company regarding the offer submitted for labelling and, eventually, a refusal to pursue the procedure in case of proven non-conformity with the general guidelines of the label (geographic localization, prior qualifications/certifications);
• a second phase of instruction overseen by a third-party instructor, an independent cabinet which expertise and skills in the field of companies data analysis and knowledge in cybersecurity are recognized.
• a third phase of decision which, based on the third-party instructor’s appraisal report and after deliberation within the award committee, consists of a formal decision of attribution, deferment or refusal of attribution of the France Cybersecurity Label regarding the submitted offer.

Documents to attach :

• The application form filled out (excel document)
• A certificate of incorporation
• The company’s statutes
• A social certificate and a tax certificate
• A fact sheet about the offer submitted for labelling
• A fact sheet about the applicant company / entity / division
• A payment commitment for processing fee

The processing fees amount is 1250€ HT for a SME or micro-company (750€ HT in case of renewal of a valid label) and 2500€ HT for any company of more than 250 people (1500€ HT in case of renewal of a valid label).

Recertification 2025
Deadline for submission of applications
Friday, 29 November 2024 at noon.