Title:

The Proactive Face of Cybersecurity: Certification. Legislation and Market Response from the Perspective of ITSEF, Journal of Telecommunications and Information Technology, 2025, Special Issue

Group publication title:

2025, Special Issue, JTIT-artykuły

Creator:

Andrukiewicz, Elżbieta ; Krawiec, Piotr

Subject and Keywords:

Common Criteria ; cybersecurity certification ; EUCC ; ITSEF ; testing laboratory

Description:

kwartalnik

Abstrakt:

The first European Cybersecurity Certification Scheme according to the Common Criteria (EUCC) specifies a number of additional requirements for Conformity Assessment Bodies (CABs) to be technically competent to provide evaluation and certification services. The NIT Testing Laboratory (ITSEF) has developed a roadmap to meet these requirements and obtain the status of an authorized ITSEF that can provide assessments of ICT products at the "high" assurance level. The roadmap consists of 3 parts: one organizational part concerning the management system and two technical parts concerning evaluations. The paper presents two action points: the innovative approach that NIT ITSEF has implemented regarding the integrated management system in the laboratory in order to achieve optimal cost-benefit ratios and the reliable and verifiable methodology for calculating the attack potential that NIT ITSEF has used to prove that the penetration tests developed and executed on the evaluated software product meet the requirements of AVA_VAN.5. The roadmap will fulfill all the requirements necessary to obtain the status of an authorized ITSEF in the EUCC program.

Number:

Special Issue

Publisher:

National Institute of Telecommunications

Date:

2025, Special Issue

Resource Type:

artykuł

DOI:

10.26636/jtit.2025.FITCE2024.1984

eISSN:

on-line: ISSN 1899-8852

Source:

Journal of Telecommunications and Information Technology

Language:

ang

Rights Management:

Biblioteka Naukowa Instytutu Łączności

License:

CC BY 4.0