Tytuł:

The Proactive Face of Cybersecurity: Certification. Legislation and Market Response from the Perspective of ITSEF, Journal of Telecommunications and Information Technology, 2025, Special Issue

Tytuł publikacji grupowej:

2025, Special Issue, JTIT-artykuły

Autor:

Andrukiewicz, Elżbieta ; Krawiec, Piotr

Temat i słowa kluczowe:

Common Criteria ; cybersecurity certification ; EUCC ; ITSEF ; testing laboratory

Opis:

kwartalnik

Abstrakt:

The first European Cybersecurity Certification Scheme according to the Common Criteria (EUCC) specifies a number of additional requirements for Conformity Assessment Bodies (CABs) to be technically competent to provide evaluation and certification services. The NIT Testing Laboratory (ITSEF) has developed a roadmap to meet these requirements and obtain the status of an authorized ITSEF that can provide assessments of ICT products at the "high" assurance level. The roadmap consists of 3 parts: one organizational part concerning the management system and two technical parts concerning evaluations. The paper presents two action points: the innovative approach that NIT ITSEF has implemented regarding the integrated management system in the laboratory in order to achieve optimal cost-benefit ratios and the reliable and verifiable methodology for calculating the attack potential that NIT ITSEF has used to prove that the penetration tests developed and executed on the evaluated software product meet the requirements of AVA_VAN.5. The roadmap will fulfill all the requirements necessary to obtain the status of an authorized ITSEF in the EUCC program.

Numer:

Special Issue

Wydawca:

National Institute of Telecommunications

Data wydania:

2025, Special Issue

Typ zasobu:

artykuł

DOI:

10.26636/jtit.2025.FITCE2024.1984

eISSN:

on-line: ISSN 1899-8852

Źródło:

Journal of Telecommunications and Information Technology

Język:

ang

Prawa:

Biblioteka Naukowa Instytutu Łączności

Licencja:

CC BY 4.0