Common Criteria - Testing Organizations

Testing Organizations

All testing laboratories must comply with ISO 17025, and certification bodies will normally be approved against either ISO/IEC Guide 65 or BS EN 45011.

The compliance with ISO 17025 is typically demonstrated to a National approval authority:

• In Canada, the Standards Council of Canada (SCC) accredits Common Criteria Evaluation Facilities
• In France, the comité français d’accréditation (COFRAC) accredits Common Criteria evaluation facilities, commonly called Centres d’Evaluation de la Sécurité des Technologies de l’Information (CESTI). Evaluations are done according to norms and standards specified by the Agence nationale de la sécurité des systemes d’information (ANSSI).
• In the UK the United Kingdom Accreditation Service (UKAS) accredits Commercial Evaluation Facilities (CLEF)
• In the US, the National Institute of Standards and Technology (NIST) National Voluntary Laboratory Accreditation Program (NVLAP) accredits Common Criteria Testing Laboratories (CCTL)
• In Germany, the Bundesamt für Sicherheit in der Informationstechnik (BSI)
• In Spain, the National Cryptologic Center (CCN)

In India, the Standardisation Testing and Quality Certification Directorate (STQC)

Characteristics of these organizations were examined and presented at ICCC 10.