(14)Given the importance of maintaining the highest possible security level, security certificates should be issued by a certification body recognised by the Management Committee within the framework of the ‘Mutual Recognition Agreement of Information Technology Security Evaluation Certificates’ of the Senior Officials Group on Information Systems Security (SOG-IS). In the context of international relations with third countries, the Commission should not recognise any certification body for the purposes of this Regulation unless that body provides equivalent conditions of security evaluation as envisaged by the Mutual Recognition Agreement. In this respect, the advice of the Management Committee should be relied upon.