NIAP Goals
Operations - In the months ahead, we will have improved automated support for NIAP evaluation operations that is integrated with the entire evaluation process. This will give NIAP the ability to manage administrative oversight of the process with less time and effort, freeing the NIAP staff to devote more time to customer requirements, PP development, Technical Community support, and other priorities. DISA Alignment - Also in the second half of this year, we expect to make further progress in aligning NIAP evaluations with DISA Security Technical Implementation Guides (STIGs). With Mobile Devices and Mobile Device Management as a primary focus area, this too are meant to make evaluations more efficient and timely to benefit users as well as industry. Value - With a more efficient evaluation process in place, NIAP will place emphasis on providing useful information to procurement authorities and other U.S. government entities. We will partner with NSA’s Information Assurance Directorate to publish Protection Profile summaries that do not require Common Criteria expertise to understand. NIAP will also work with CCTLs and industry partners to ensure each evaluated product has a clear, easy to follow configuration guide. Outreach - To help spread the word to customers and industry not familiar with Common Criteria, NIAP will be posting a new brochure and fact sheets that can be downloaded, printed and used to help inform these audiences about NIAP, Common Criteria, the benefits of Protection Profile-based evaluations, and opportunities to take part in Technical Communities. CCUF Collaboration - Enhanced communications and increased transparency with industry is the goal for the upcoming NIAP/CCUF working group. NIAP is collaborating with the Common Criteria Users Forum to organize a working group for periodic consultation on initiatives, questions and policies relating to development of protection profiles and CC evaluations. NIAP will continue to seek and welcome inputs from testing labs, industry and other stakeholders as well. NIAP looks forward to continued progress in making current evaluated COTS ICT products available through collaboration with industry, international partners, and national stakeholders. |