The Spanish National Cryptologic Center (CCN) includes in its CPSTIC Security Products Catalog five new products evaluated by jtsec. In collaboration, side by side, with five of our international clients, at jtsec we evaluate the cybersecurity of IT products detecting possible vulnerabilities with an exhaustive testing before the products go to market.
What does having a LINCE certification bring?
This certification is one of the ways in which these products are included in the Catalogue of ICT Security Products (CPSTIC), which regulates the acquisition of IT products in the Spanish administration. With the LINCE certification, the products will be recognized as suitable for systems that must comply with the National Security Scheme (ENS).
Products certified in the CPSTIC Safety Catalogue
| Product | Manufacturer | Category |
| Intercept X Advanced with EDR 2.5.4 BETA/ 10.8.6/2.0.16 BETA. | Sophos LTD. | Operational Security |
| MIL2004-2xHSR-L3. 19.12 | SoCe System-on-Chip engineering – Novatronic Sistemas | Communications Protection |
| ESET Endpoint Security 7.2.2055.3 | ESET SPOL S.R.O | Operational Security |
| McAfee Data Loss Prevention (DLP) Endpoint with ePolicy Orchestrator 5.10 11.1 | McAfee, LLCO | Protection of Information and Media |
| Stormshield Network Security UTM/NG-Firewall | Stormshield SAS | Communications Protection |
How to be included in the CPSTIC catalogue?
The entry in the CPSTIC catalogue can be obtained by carrying out a LINCE assessment or a Common Criteria assessment. In the case of the Common Criteria assessment, depending on the scope of the original assessment, additional STIC tests are required. It is important to remember that the certification must always be performed by an accredited laboratory. jtsec is the first laboratory recognized by the Spanish National Accreditation Entity (ENAC) in Spain in LINCE methodology..
How does jtsec evaluate a product according to LINCE criteria?
The LINCE certification is focused on vulnerability analysis and product penetration testing. jtsec experts perform an "ethical hacking" in a methodological and accredited way ensuring the maximum guarantees.
The results of the evaluation by jtsec are reflected in an Evaluation Technical Report (ETR). Afterwards, the CCN reviews the report and validates the work done by jtsec, successfully issuing the LINCE certificate.
jtsec offers an integral service to its clients to include their products in the catalogue giving support in the definition of the security declaration, the procedure of inclusion in the catalogue, the LINCE evaluation and the writing of the safe use procedure.
