Welcome to TechNet Blogs Sign in | Join | Help

British Gov't validating security tools - "CSIA CT Mark"

The CSIA is sort of the British version of NIST, with respect to IT.  They've invented their own accreditation for security tools (link), basically looking to validate the vendor's claims (thus the name, "Claim Tested Mark").  This is a very different approach to that used in the Common Criteria process, which seeks to apply a single set of standards to many different products. 

I think I like the British approach more -- it provides customers with some amount of trust that the products will perform as described, without making the verification process so onerous that only the products with the largest volumes (e.g. Windows Server) would ever be put through the process.

Published Wednesday, September 14, 2005 10:30 AM by jeffnew

Comment Notification

If you would like to receive an email when updates are made to this post, please register here

Subscribe to this post's comments using RSS

Comments

No Comments

Leave a Comment

(required) 
required 
(required) 

  
Enter Code Here: Required
 
Page view tracker