IT Evaluation & Assessment
Common Criteria Evaluation
Consult our experts. We are happy to support you.
The Common Criteria (CC), also known as ISO 15408, is an internationally recognized standard used to specify and assess the security of IT products. It is used by governments and other organizations to confirm the security functionality of information technology products. The CC standard defines a set of criteria by which a product’s security aspects – for example, the development environment, security functionality, and handling of security vulnerabilities – can be meaningfully evaluated.
What atsec offers:
atsec operates under Common Criteria evaluation schemes in Germany, the USA, Sweden, Italy, and in Singapore. The certificates from these countries are recognized in more than 30 countries, and details for atsec’s accreditation and approvals can be found on our certificates page.
Certification authorities:
More information:
Why our services are important to you:
atsec is one of the most experienced evaluation labs in the world, with more than 20 years of experience in the field of security evaluations. Members of atsec have been heavily involved in the development of the German and European information security criteria that were the basis for the Common Criteria, and atsec is involved in the further development of the Common Criteria to this day.
With hundreds of CC evaluations of various information security products completed – including large, complex software systems like operating systems, databases, firewalls, mobile devices, and printing systems of renowned manufacturers – atsec provides both trusted and thorough testing services.
Downloads:
Further information for your journey to certification.
Common Criteria evaluations performed by atsec:
![](/wp-content/uploads/2024/06/atsec-at-contact-us.png)
Still have questions?
Can’t find what you’re looking for? Let’s talk!
Security Content Automation Protocol (SCAP)
The Security Content Automation Protocol (SCAP) combines a number of open standards to provide a resource that enables the automation and standardization of technical security operations.
Open Trusted Technology Provider Standard Services
The Open Trusted Technology Provider Standard (O-TTPS) is a collaborative initiative that seeks to prevent tainting and counterfeiting in the global supply chain for COTS information and communication technology.
Medical Devices IEEE 2621
The IEEE Medical Device Cybersecurity Certification Program has been developed by the IEEE 2621 Conformity Assessment Committee (CAC) to provide certification for wireless diabetes devices.
The Information Security Provider
Read Our Latest Blog Articles
Learn the latest and greatest about information security. You’ll find insights and analyses of recent developments in technology and policy on our blog.
-
Exciting Milestone: First atsec Cybersecurity Certificates Issued for Common Criteria
Written by Rasma Mozuraite Araby We are thrilled to announce that atsec’s Certification Body (CB) officially issued its first cybersecurity certificates for Common Criteria. This achievement represents atsec’s readiness for the upcoming European Cybersecurity Certification Scheme (EUCC), positioning our Certification Body at the forefront of cybersecurity compliance in…
-
First Post Quantum Cryptographic Algorithm Certificates Issued
Written by Stephan Mueller NIST published the final version of FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA) on August 13, 2024, making the first post-quantum cryptographic (PQC) algorithms official and wrapping up an eight-year effort to prepare us for a future where quantum cyberattacks are…
-
atsec Selected as PCI GEAR Member for 2024 – 2026
Written by Yan Liu atsec (Beijing) Information Technology Co., Ltd (short for “atsec”) is pleased to announce that atsec has become one of the PCI Global Executive Assessor Roundtable (GEAR) members for the 2024 – 2026 term. The PCI Security Standards Council (SSC) GEAR is a direct communication…