When CCSS v9.0 was released on December 17, 2024, it introduced major updates to requirements and audit expectations. While this version marks a strong step forward, the transition has impacted timelines for some teams already preparing for certification under v8.1.

To support those efforts, new system certifications may still be conducted under CCSS v8.1 if the Intent to Audit form is submitted by December 17, 2025.

What’s Changing

• New audits may use v8.1 or v9.0 until December 17, 2025.
  
  
• After that, all new audits must follow v9.0.
  
  
• The CCSS version number will continue to be listed publicly for each certified system.
  
  

Why This Matters

This extension, based on auditor and community feedback, gives organizations:

• Time to align with v9.0
  
  
• A clear path for in-progress v8.1 efforts
  
  
• Stability during the version transition
  
  

With the draft of v9.0 available three months before publication, this updated timeline provides a full year of visibility into the changes.

We appreciate the community’s input in shaping this decision and look forward to continued collaboration as we raise the bar for crypto security.

To learn more or begin a CCSS audit, visit https://cryptoconsortium.org/ccss