Lantego - The Compliance Experts

Common Criteria - For Security Product Vendors

A Common Criteria evaluation is a must to sell secure products to the Federal marketplace. The US Government declared in 2003 that they would no longer purchase security products for their national security systems unless they have been Common Criteria certified (NSTISSC No. 11).

Even outside the Federal Government, buyers are increasingly looking for objective assurance that the secure products meet their security needs.The Common Criteria Evaluation Validation Scheme (CCEVS) provides customers with an independent attestation of the security properties enforced by security products.

Common Criteria Consulting

Common Criteria Project Planning

Common Criteria Lab Selection

Common Criteria Support

Common Criteria Project Planning

The decision to support a Common Criteria evaluation should not be taken lightly. A Common Criteria certification can provide a secure product vendor with many marketing opportunities, but it also comes at a price. The vendor should assess the resources required to support an evaluation prior to expending too much time and effort. Lantego will work with the secure product vendor to determine the optimum strategy for Common Criteria certification. Lantego will review the product market space and competitive position of the vendor's product. This will provide input to the decision to commence with the project, candidate product configurations and EAL level(s), and candidate Protection Profiles or Security Targets. Lantego will review existing documentation, test suites, and product features. This will provide input to the scoping of necessary resources to support the certification. This is also a good time to develop a protection profile (if necessary) and the security target for the evaluation

CCEVS Lab Selection

Once a vendor has decided to move forward with a Common Criteria evaluation, a common criteria lab must be selected. Lantego will work with the vendor to select evaluation labs for consideration, develop a request for proposal, evaluate responses, and assist in the selection of the certification laboratory.

Common Criteria Support

Criteria certification is a high-profile project within the vendor's organization and must be effectively managed and supported. Lantego will work with the vendor to manage the certification project, develop or review required documentation, interface with the certification lab, support product testing, and support marketing efforts based on the certification.