The presentation will provide practical information on how to fact-basedly assess a provider's trustworthiness when making purchasing decisions for cybersecurity solutions. Criteria and international norms and standards (e.g., ISO 27001, SOC2, or CC) that should be considered in the selection process and that trustworthy providers should meet will be identified and discussed. Practical examples from Europe will also be presented, such as the STIC catalog of the Spanish National Cryptography Center, which lists products that meet specified security criteria and are recommended for secure use. The presentation will place particular emphasis on provider transparency. Beyond meeting legal requirements, it is increasingly important for cybersecurity providers to make their own processes transpa ...