U.S. Government Approved Protection Profiles

Effective October 1, 2009, any product accepted into evaluation under the U.S. CC Scheme must claim compliance to a U.S. Government approved Protection Profile. The following Protection Profiles (PP) have been approved for use by vendors for evaluation of products under the NIAP Common Criteria Evaluation and Validation Scheme (CCEVS) and the Common Criteria Recognition Arrangement (CCRA).

In addition, NIAP is currently in the process of updating our PPs. Our first step is to update existing U. S. Government Basic Robustness Protection Profiles to reflect more current threat and functional requirements. We are referring to these as Interim PPs and, as they are completed, they will replace the corresponding Basic PPs.

Concurrently, NIAP is creating a Standard Protection Profile for each technology that will replace any corresponding U.S. Government Protection Profile. NIAP is working with industry, our customers, and the Common Criteria community to create these profiles. The first generation of these Protection Profiles will take into account the current assurance that is achievable for a technology and the Evaluation Assurance Level (EAL) will be set based on the availability of the documentation, test plans, and tools needed to obtain consistent and comparable results (see PPs in Development for a status of each PP).

Please see the announcement from the NIAP Director, “Sunsetting of NIAP Protection Profiles – Effective 1 September 2011”, dated 2 August 2011.