We will not deny that we are very excited to be an accredited laboratory to perform Common Criteria evaluations and thus be able to contribute our bit in the world of cybersecurity.
After a detailed accreditation process by ENAC and CCN that took several months of effort and preparation, last August 19th, we officially obtained the accreditation as a Common Criteria laboratory. A great honor and commitment that makes us give the best of ourselves in this new chapter in the history of jtsec.
LINCE Laboratory, first step as evaluators
Cybersecurity assessment is a field we were previously familiar with. In the April of 2019, jtsec was the first laboratory accredited to carry out LINCE evaluations, the Spanish cybersecurity standard for medium and low security levels.
After dozens of evaluated ICT products, we acquired the appropriate experience to take the next step towards the Common Criteria methodology, much more demanding and complex and in which we have collaborated in dozens of projects on the consulting side.
A great challenge ahead
With almost 50 projects as Common Criteria consultants under our belt, working with different levels of security (EALs) and collaborating with several laboratories worldwide, we took the step of offering our clients the possibility of carrying out the complete certification, including the assessment part. Therefore, we decided to become accredited as a laboratory in order to apply our unique work methodology and tools during the entire process.
CCEval, the perfect tool for Common Criteria evaluations
If there is one key aspect that distinguishes us from other Common Criteria laboratories, it is the use of CCEval, a unique tool created by jtsec that automates certain activities in the evaluation process, thus saving time and money for our clients. The combination of CCEval and CCGen tools creates CCToolbox, which covers the entire Common Criteria certification process.
Common Criteria certification process with jtsec
At jtsec we have created an comprehensive work methodology that allows us to optimize the certification process to make it as simple as possible for our clients, thus avoiding unnecessary workloads and the consequent time delay in the project. We have three defined steps:
If you are considering Common Criteria certification for your product, do not hesitate to contact us, we will support you throughout the process for your peace of mind.