Within the framework of IT product/service certification, IMQ is ISO/IEC 17065 accredited for the following schemes:
IMQ laboratory is accredited according to ISO 17025 for vulnerability assessment (VA) on the infrastructures used by Trust Service Provider.
In order to improve the trust of small and medium enterprises (SMEs) and consumers in the internal market and to promote the use of trust services and products, EU Regulation 910/2014 “eIDAS” (Electronic IDentification Authentication and Signature), which has been in full force since 1 July 2016, introduced the concepts of qualified trust services and qualified trust service providers, with a view to specifying the requirements and obligations that ensure a high level of security for all qualified trust services and products used or provided.
eIDAS certification (Electronic IDentification Authentication and Signature) ensures that Trust Service Providers (TSPs) and the services they provide in support of electronic interaction comply with the requirements of Regulation (EU) 910/2014.
IMQ has obtained eIDAS accreditation from Accredia and can support TSPs as a third-party body in the task of guaranteeing the qualification of trust service operators and their compliance with the applicable national regulations, according to ETSI EN 319 401, ETSI EN 319 411-1, ETSI EN 319 411-2 and ETSI EN 319 421.
As well as enhancing consumer confidence, eIDAS certification brings certified TSPs practical advantages in terms of reducing bureaucratic requirements and administrative expenses.
Users are provided with a digital identity by digital identity providers: these are private entities accredited by AgID (the Italian digital agency), which provide digital identities to individuals and businesses that need them in order to make use of the Public Administration’s on-line services. To obtain accreditation from AgID and thus be able to provide identification services to individuals and businesses, digital identity providers must be certified by an Accredia accredited certification body such as IMQ.
The purpose of IMQ certification is to ensure, with an adequate degree of confidence, the provider’s ability to provide the digital identity management service in accordance with Article 29 of the Digital Administration Code (Legislative Decree No. 82 of 7 March 2005 as amended), i.e. the technical and organisational requirements established by AGID.