Common Criteria Evaluation
Consulting Services

When a manufacturer of IT products begins planning a project to get a Common Criteria (CC) certificate for their IT products, a number of questions arise regarding the evaluation process and its associated responsibilities, deliverables, schedules, and time commitments. 

The need for a CC evaluation usually arises because the product vendor is confronted with a requirement from a government agency or military customer such as this: “We can only buy a product that has a Common Criteria certificate issued for it.”  The vendor may be able to buy some time by promising to get a CC evaluation started ASAP, but how long will that take? 

Sometimes the customer will also require that the CC certificate be achieved for a specific Evaluation Assurance Level (EAL), such as EAL 3 or 4.  Or perhaps the IT product also uses encryption algorithms as part of its security features, and the customer (usually military or a security agency) will also require a FIPS 140-2 Validation of their security algorithms.  What is the vendor or manufacturer to do?

NetGreen Consulting Can Help!

If you're wondering how to meet these Common Criteria Evaluation requirements and get your products through the rigorous documentation and testing that are required to get a CC Certificate, NetGreen Consulting, Inc. can assist you. We've worked with a number of Common Criteria Test Labs (CCTLs), CCTL evaluators and NIAP validators, and have led successful projects to provide the documentation and test plans needed to obtain a Common Criteria Certificate for several vendors.

We've even prepared a document for Vendors/Sponsors of a Common Criteria "Target of Evaluation" (TOE) that details the entire process.   It provides insight and recommendations about the CC Evaluation process, the "players" involved, and what the Vendor can expect in the way of time commitments, costs, schedules, personnel involved, and pitfalls to watch out for.

We'd be happy to send you a copy of this informative 20-page document at no cost to you.  The image below from this document represents a basic illustration of the usual participants in a Common Criteria Evaluation in the US.  Simply click on the image below to get your free copy of this valuable document.

Click on the image above to download our Overview of the Common Criteria Evaluation process - written particularly for the Sponsors who need to get a CC Certificate for their IT products.