Information Technology Security Evaluation and Testing

The Standards Council of Canada (SCC), in partnership with the Communications Security Establishment (CSE), offers accreditation to information technology security evaluation and testing laboratories. The CSE is a federal government agency that delivers information technology security solutions to the Canadian government.

The accreditation program was created by the SCC and the CSE in 1998 in an attempt to ensure greater confidence in the ability of information technology (IT) security products to protect sensitive data from loss, alteration or disclosure. It was created for use with the government and the private sector. The process for becoming an accredited lab includes an assessment of technical resources, staff qualifications and quality management systems.

Accreditation applies to the following areas:

• Common Criteria product and system evaluations;
• ITS product reviews;
• Secure electronic commerce application evaluations;
• Biometric device testing;
• Vulnerability and tiger team testing; and
• Specialized commercial security device testing.

• Criteria & Procedures