A comprehensive base of standards and processes is available for neutral and reliable assessment of the security of IT products and systems. The internationally recognised Common Criteria (<acronym>ISO/IEC</acronym> 15408), the so-called “Common Criteria for Information Technology Security Evaluation”, have become an established standard for the purpose of assessing information security. These Common Criteria are internationally consistent test criteria for the evaluation of security features in IT solutions, on the basis of which evaluations are made and IT security certificates are issued.
The evaluation and certification provide neutral confirmation that the IT security objectives declared by the manufacturer are verifiably fulfilled by the solution.
Certification normally occurs at the initiative of the manufacturer desiring certification of the security features of his products in order to be able to better position them in the market. In Germany, the certification instance is the German Federal Office for Information Security (BSI).
The first step is an evaluation of the product in accordance with the Common Criteria.
Prior to the start of an evaluation project, solution providers planning for an evaluation or conformity certification often find themselves confronted with a multitude of regulations, procedures and authorities which have a critical impact on how the project proceeds. These are frequently occurring key words:
As a leading provider in the field of information security, we have developed various security solutions which have been successfully evaluated and certified or confirmed in accordance with the German Signature Act (SigG) / Digital Signature Ordinance (SigV). For this, we collaborate with various renowned test centres and thus are familiar with the challenges from a manufacturer’s perspective. In addition, we have supported numerous manufacturers in preparing their IT products for evaluation. We pass this extensive experience on to you. Our experts can provide you with solution approaches for your project and thus increase your project’s efficiency.