FOR IMMEDIATE RELEASE: 1999-05-18

First Lab Accredited to Evaluate IT Security Products

National program to enhance confidence in IT security products reaches another milestone

The first laboratory has been accredited in a program that is expected to lead to greater confidence in the ability of information technology (IT) security products to protect sensitive data from loss, alteration or disclosure.

The Standards Council of Canada in partnership with the Communications Security Establishment (CSE) announced today that DOMUS IT Security Laboratory (ITSL), a division of LGS Group Inc., is the first laboratory to receive an accreditation recognizing its ability to test the effectiveness of information technology security products. Accreditation provides international recognition of a lab's competence, enhancing its marketability and increasing consumer confidence in its abilities.

The accreditation program is the result of an innovative agreement between the Standards Council and CSE that created a broadly based private sector and government partnership committed to providing Canada with a trustworthy means of evaluating IT security products.

Under the partnership, the Standards Council accredits laboratories, which includes assessment of technical resources, independence of operation, staff qualifications and quality management systems. For its part, CSE certifies products on the basis of tests performed against the Common Criteria - an internationally recognized IT security standard devised by CSE and its partners in the US, the UK, Germany, France and the Netherlands. The Common Criteria can be found on CSE's web site at www.cse-cst.gc.ca.

A product evaluation conducted in a Standards Council accredited lab and certified by CSE against the Common Criteria in Canada is recognized in the other partner countries, thus providing an international market for the product.

Guidelines for the Accreditation of Information Technology Security Evaluation and Testing Facilities (CAN-P-1591) and Checklist for the Assessment of Information Technology Security Evaluation and Testing Facilities (CAN-P-1592) are used to accredit the Information Technology Security Evaluation and Testing facilities. Both are available on the Standards Council's Web site at www.scc.ca.

The Standards Council of Canada is the federal Crown corporation that oversees the National Standards System. Its Program for Accreditation of Laboratories - Canada (PALCAN) has accredited over 200 laboratories in a variety of general testing and specialty areas.

CSE is a federal government agency that delivers information technology security solutions to the Canadian government.

- 30 -