Standardisation and certification of products, services and management systems, in particular provided by existing institutions, deserve particular attention in the network and information security policy of the EU as a means to spread good practice and professionalism in the network and information security field; especially new emerging technologies like RFID and mobile-TV would benefit from tim