NIAP: NIAP Home Page
NIAP/CCEVS Home Page

NIAP Oversees Evaluations of Commercial IT Products for Use in National Security Systems
Questions?  We're here to help

  About NIAP

The National Information Assurance Partnership (NIAP) is responsible for U.S. implementation of the Common Criteria, including management of the NIAP Common Criteria Evaluation and Validation Scheme (CCEVS) validation body.  NIAP manages a national program for developing Protection Profiles, evaluation methodologies, and policies that will ensure achievable, repeatable, and testable requirements.  In partnership with NIST, NIAP also approves Common Criteria Testing Laboratories to conduct these security evaluations in private sector operations across the U.S. 

NIAP takes a collaborative approach to technology-specific protection profile development by supporting the creation of international technical communities of representatives from industry, government, end users, and academia.  This results in consistent evaluation methodologies across U.S. testing labs and among labs associated with international Common Criteria Recognition Arrangement schemes. 

NIAP also works with NATO and international standards bodies (ISO) to share Common Criteria evaluation experiences and avoid duplication of effort.  In the U.S., NIAP engages with other National Security Systems (NSS) users to ensure Protection Profiles, along with their associated DoD Annexes, provide a streamlined certification path for IA and IA enabled COTS products employed with NSS. 


  • New Scheme Policy Letter #29 Published

    NIAP has issued Policy Letter #29, Certificate Maintenance Length of Common Criteria Evaluation and Validation Services (CCEVS) Evaluations. Please review and contact NIAP with any questions.

  • PP-Module for MACsec Ethernet Encryption V1.0 Published!

    The National Information Assurance Partnership/Common Criteria Evaluation and Validation Scheme (NIAP/CCEVS) is pleased to announce the posting of the PP-Module for MACsec Ethernet Encryption V1.0.  This was a minor update to align with Network Device cPP v2.2e, add updates requested by the Australian Certification Authority, supports the conversion to PP-Module, and incorporates all applicable NIAP Technical Decisio...

    Read More

  • Call for Participants in the Cryptographic Technical Community

    The National Information Assurance Partnership/Common Criteria Evaluation and Validation Scheme (NIAP/CCEVS) is pleased to invite interested parties to be part of a Technical Community (TC) for the development of Cryptographic requirements. Members of this TC are expected to provide technical input to the development and update of cryptographic Security Functional Requirements (SFRs) to incorpora...

    Read More

  • Call for Participants in the Mobility Technical Community

    The National Information Assurance Partnership/Common Criteria Evaluation and Validation Scheme (NIAP/CCEVS) is pleased to invite interested parties to be part of a Technical Community (TC) for the update of the PP-Module for MDM Agent v1.1. The purpose of this update is to align with the Protection Profile for Genera...

    Read More

  • NIAP 2022 Annual Report

    See the NIAP 2022 Annual Report to learn about NIAP accomplishments and activities in 2022. Read the report here.

  • Authentication Server PP-Module V1.0 Published!

    The National Information Assurance Partnership/Common Criteria Evaluation and Validation Scheme (NIAP/CCEVS) is pleased to announce the posting of the Authentication Server PP-Module V1.0.  This was a minor update to align with Network Device cPP v2.2e, add two-factor authentication, and support the conversion to PP module.  In addition, all applicable NIAP Technical Decisions were incorporated.

  • Want more news?

    Check out all the announcements online or...

    subscribe.













  Focus Areas

Industry
 
U.S. Government
 
International Partners
  Events


Site Map              Contact Us