Protection Profiles in Development

The following table lists all U.S. Government Protection Profiles currently being developed or modified and gives a general indication of their current status. For additional information, please send inquiries to niap@niap-ccevs.org.

Proposed Protection Profile Development Process

Phase 1
Initiation
1-3 months +
  • Create Essential Security Requirements (ESR)
 
Phase 2
Planning
1 month
  • Form TC
 
Phase 3
Development
2 months
  • DevelopEnglish Requirements
  • & Assurance Activities
 
Phase 4
Translation
1-1.5 month
  • Convert Requirements to CC Language
 
Phase 5
Publishing
1 month
  • Obtain approval for public release
  • Posting on NIAP website

Protection Profile Status as of 23 June 2017
PP Name Tech Type Phase Est. Completion
Extended Package for SSL/TLS Inspection Proxy V1.0 Miscellaneous Phase 1 CY2017, Q2
Extended Package for Software File Encryption Version 2.0 Encrypted Storage Phase 1 CY2017, Q2
Extended Package for VPN Client Version 1.0 Virtual Private Network Phase 3 CY2017, Q2
Protection Profile for Peripheral Sharing Switch (PSS) Version 1.0 Peripheral Switch Phase 3 CY2017, Q3
Extended Package for PSS Input Devices V1.0 Peripheral Switch Phase 3 CY2017, Q3
Protection Profile for Certification Authorities Version 2.0 Certificate Authority Phase 4 CY 2016, Q3
Protection Profile for Certification Authorities Version 1.0 Certificate Authority Phase 4 CY 2014, Q2
Protection Profile for Intrusion Prevention Systems Extended Package Version 1.0 IDS/IPS Phase 4 CY 2014, Q2
U.S. Government Protection Profile Intrusion Detection System - Analyzer for Basic Robustness Environments, Version 1.3 IDS/IPS Phase 4
U.S. Government Protection Profile Intrusion Detection System - Scanner for Basic Robustness, Version 1.3 IDS/IPS Phase 4
U.S. Government Protection Profile Intrusion Detection System - Sensor for Basic Robustness Environments, Version 1.3 IDS/IPS Phase 4
U.S. Government Protection Profile Intrusion Detection System - System for Basic Robustness Environments, Version 1.7, dated July 25, 2007 IDS/IPS Phase 4
U.S. Government Protection Profile Intrusion Detection System - System for Medium Robustness Environments, Version 1.1 IDS/IPS Phase 4
U.S. Government Protection Profile Intrusion Detection System - Sensor for Medium Robustness Environments, Version 1.1 IDS/IPS Phase 4
U.S. Government Protection Profile Intrusion Detection System - Scanner for Medium Robustness Environments, Version 1.1 IDS/IPS Phase 4
U.S. Government Protection Profile Intrusion Detection System - Analyzer for Medium Robustness Environments, Version 1.1 IDS/IPS Phase 4
Extended Package for Wireless Intrusion Detection/Prevention Systems (WIDS/WIPS) Version 1.0 IDS/IPS Phase 4 CY 2016, Q3
Extended Package for Intrusion Prevention Systems Version 2.1 IDS/IPS Phase 4
Extended Package for Intrusion Prevention Systems Version 2.0 IDS/IPS Phase 4 CY 2015, Q4
Extended Package for Intrusion Prevention Systems Version 2.11 IDS/IPS Phase 4
U.S. Government Family of Protection Profiles for Public Key Enabled Applications for Basic Robustness Environments, Version 2.8 PKI/KMI Phase 4
U.S. Government Protection Profile Authorization Server for Basic Robustness Environments, Version 1.1 PKI/KMI Phase 4 2013, Q3
U.S. Government Directory Protection Profile for Medium Robustness Environments, Version 1.1 PKI/KMI Phase 4
U.S. Government Protection Profile Anti-Virus Applications for Workstations in Basic Robustness Environments Version 1.2 AntiVirus Phase 4
Protection Profile for Enterprise Security Management-Access Control Version 2.1 Enterprise Security Management Phase 4 CY 2014, Q4
Protection Profile for Enterprise Security Management - Identity and Credential Management Version 2.1 Enterprise Security Management Phase 4
Protection Profile for Enterprise Security Management - Policy Management Version 2.1 Enterprise Security Management Phase 4
Protection Profile for Enterprise Security Management - Identity and Credential Management Version 1.4 Enterprise Security Management Phase 4
Protection Profile for Enterprise Security Management - Access Control Version 2 Enterprise Security Management Phase 4
Enterprise Security Management - Policy Management Version 1.4 Enterprise Security Management Phase 4
Protection Profile for Hardcopy Devices Version 1.0 Multi Function Device Phase 4 CY 2015, Q1
U.S. Government Protection Profile for Hardcopy Devices Version 1.0 (IEEE Std. 2600.2™-2009) Multi Function Device Phase 4
U.S. Government Protection Profile for Hardcopy Devices Version 1.0 (IEEE Std. 2600.1™-2009) Multi Function Device Phase 4
Protection Profile for Network Devices Version 1.0 Network Device Phase 4
Protection Profile for Network Devices Version 1.1 Network Device Phase 4
collaborative Protection Profile for Network Devices Version 1.0 Network Device Phase 4
Extended Package for Session Border Controller Version 1.1 Network Device Phase 4 CY 2016, Q3
Extended Package for Authentication Servers Version 1.0 Network Device Phase 4 CY 2015, Q3
Extended Package for Session Border Controller Version 1.0 Network Device Phase 4
collaborative Protection Profile for Full Drive Encryption - Encryption Engine Version 1.0 Encrypted Storage Phase 4
collaborative Protection Profile for Full Drive Encryption – Authorization Acquisition Version 1.0 Encrypted Storage Phase 4
Protection Profile for Software Full Disk Encryption Version 1.0 Encrypted Storage Phase 4
collaborative Protection Profile for Full Drive Encryption - Authorization Acquisition Version 2.0 Encrypted Storage Phase 4
collaborative Protection Profile for Full Drive Encryption - Encryption Engine Version 2.0 Encrypted Storage Phase 4
Extended Package for VPN Gateways Version 2.1 Virtual Private Network Phase 4
Extended Package for Secure Shell (SSH) Remote Access Phase 4 CY 2016, Q1
Extended Package for MACsec Ethernet Encryption Version 1.1 Network Encryption Phase 4 CY 2016, Q1
Extended Package for MACsec Ethernet Encryption Version 1.2 Network Encryption Phase 4
Extended Package for MACsec Ethernet Encryption Version 1.0 Network Encryption Phase 4 CY 2015, Q3
General-Purpose Operating System Protection Profile Operating System Phase 4
U.S. Government Protection Profile for General-Purpose Operating Systems in a Networked Environment, Version 1.0 Operating System Phase 4
Protection Profile for General Purpose Operating Systems Version 4.1 Operating System Phase 4 3/9/2016
Protection Profile for General Purpose Operating Systems Version 4.0 Operating System Phase 4
U.S. Government Biometric Verification Mode Protection Profile for Medium Robustness Environments, Version 1.1 Biometrics Phase 4
U.S. Government Biometric Verification Mode Protection Profile for Basic Robustness Environments, Version 1.1 Biometrics Phase 4
U.S. Government Protection Profile Web Server for Basic Robustness Environments, Version 1.1 Web Server Phase 4
U.S. Government Protection Profile Database Management Systems, Version 1.3 DBMS Phase 4
U.S. Government Protection Profile Database Management Systems for Basic Robustness Environments, Version 1.2 DBMS Phase 4
Peripheral Sharing Switch for Human Interface Devices Protection Profile, Version 1.1 Peripheral Switch Phase 4
Validated Protection Profile - Peripheral Sharing Switch for Human Interface Devices Protection Profile, Version 2.1 Peripheral Switch Phase 4
Peripheral Sharing Switch for Human Interface Devices Protection Profile, Version 2.0 Peripheral Switch Phase 4
Peripheral Sharing Switch for Human Interface Devices Protection Profile, Version 1.2 Peripheral Switch Phase 4
Protection Profile for Peripheral Sharing Switch Version 3.0 Peripheral Switch Phase 4
U.S. Government Router PP for Medium Robustness Environments, Version 1.1 Router Phase 4
U.S. Government Router PP for Medium Robustness Environments, Version 1.1 (excluding AVA_VAN.4 & AVA_CCA_(EXT).1) Router Phase 4
US Government Wireless Local Area Network (WLAN) Access System for Basic Robustness Environments, Version 1.1 Wireless LAN Phase 4
US Government Protection Profile Wireless Local Area Network (WLAN) Client for Basic Robustness Environments, Version 1.1 Wireless LAN Phase 4
Protection Profile for Wireless Local Area Network (WLAN) Access Systems Version 1.0 Wireless LAN Phase 4
Protection Profile for Wireless Local Area Network (WLAN) Clients Version 1.0 Wireless LAN Phase 4
Extended Package for Wireless LAN Access System Wireless LAN Phase 4 05/28/2015
Extended Package for Wireless LAN Client Version 1.0 Wireless LAN Phase 4 CY 2016, Q1
collaborative Protection Profile for Stateful Traffic Filter Firewalls Version 1.0 Firewall Phase 4
Network Device Protection Profile (NDPP) Extended Package Stateful Traffic Filter Firewall Version 1.0 Firewall Phase 4
U.S. Government Firewall Protection Profile for Medium Robustness Environments, V1.1 Firewall Phase 4
U.S. Government Traffic-Filter Firewall Protection Profile for Medium Robustness Environments, Version 1.1 Firewall Phase 4
U.S. Government Protection Profile for Application-level Firewall in Basic Robustness Environments Version 1.1 Firewall Phase 4
U.S. Government Protection Profile for Traffic Filter Firewall in Basic Robustness Environments Version 1.1 Firewall Phase 4
U.S. Government Virtual Private Network Boundary Gateway for Medium Robustness Environments, Version 1.1 Virtual Private Network Phase 4
U.S. Government Virtual Private Network Boundary Gateway for Medium Robustness Environments, Version 1.2 Virtual Private Network Phase 4
U.S. Government Virtual Private Network Boundary Gateway for Medium Robustness Environments, Version 1.2 (excluding AVA_VAN.4 & AVA_CCA_(EXT).1) Virtual Private Network Phase 4
Protection Profile for IPsec Virtual Private Network (VPN) Clients Version 1.1 Virtual Private Network Phase 4
Network Device Protection Profile (NDPP) Extended Package VPN Gateway Version 1.0 Virtual Private Network Phase 4
Protection Profile for IPsec Virtual Private Network (VPN) Clients Version 1.3 Virtual Private Network Phase 4
Network Device Protection Profile (NDPP) Extended Package VPN Gateway Version 1.1 Virtual Private Network Phase 4
Protection Profile for IPsec Virtual Private Network (VPN) Clients Version 1.4 Virtual Private Network Phase 4 CY 2013, Q4
Extended Package for VPN Gateways Version 2.0 Virtual Private Network Phase 4 CY 2015, Q4
Extended Package for Software File Encryption Version 1.0 Encrypted Storage Phase 4 CY 2014, Q3
Protection Profile for Software Full Disk Encryption Version 1.1 Encrypted Storage Phase 4
Protection Profile for Full Disk Encryption Encrypted Storage Phase 4
Protection Profile for Mobile Device Management Version 1.1 Mobility Phase 4
Protection Profile for Mobile Device Fundamentals Version 2.0 Mobility Phase 4
Protection Profile for Mobile Device Fundamentals Version 1.1 Mobility Phase 4
Protection Profile for Mobile Devices Version 1.0 Mobility Phase 4 CY 2013, Q4
Protection Profile for Mobile Device Management Systems Version 1.0 Mobility Phase 4 CY 2013, Q4
Protection Profile for Mobile Operating Systems Version 1.0 Mobility Phase 4
Protection Profile for Mobile Device Fundamentals Version 3.1 Mobility Phase 4 6/16/2017
Extended Package for Mobile Device Management Agents Version 3.0 Mobility Phase 4 CY 2016, Q3
Protection Profile for Mobile Device Management Version 3.0 Mobility Phase 4 CY 2016, Q3
Protection Profile for Mobile Device Management Version 2.0 Mobility Phase 4
Extended Package for Mobile Device Management Agents Version 2.0 Mobility Phase 4
Protection Profile for Mobile Device Fundamentals Version 3.0 Mobility Phase 4
Protection Profile for Server Virtualization Version 1.1 Virtualization Phase 4 CY 2015, Q3
Protection Profile for Virtualization Version 1.0 Virtualization Phase 4 11/22/2016
Extended Package for Client Virtualization Version 1.0 Virtualization Phase 4
Extended Package for Server Virtualization Version 1.0 Virtualization Phase 4
Protection Profile for Server Virtualization Version 1.0 Virtualization Phase 4 CY 2014, Q3
Protection Profile for Application Software Version 1.0 Application Software Phase 4 CY 2014, Q4
Protection Profile for Application Software Version 1.1 Application Software Phase 4
Protection Profile for Application Software Version 1.2 Application Software Phase 4 CY 2016, Q2
Protection Profile for BIOS Update for PC Client Devices Version 1.0 BIOS Update Phase 4
Extended Package for Email Clients v2.0 Email Client Phase 4
Protection Profile for Email Clients Version 1.0 Email Client Phase 4 CY 2014, Q1
Protection Profile for Redaction Version 1.0 Redaction Tool Phase 4 CY 2014, Q2
Extended Package for Redaction Tools Redaction Tool Phase 4
Extended Package for Enterprise Session Controller (ESC) Version 1.0 SIP Server Phase 4 CY 2016, Q3
Extended Package for SIP Server Version 2.0 SIP Server Phase 4 CY 2015, Q4
Network Device Protection Profile (NDPP) Extended Package SIP Server Version 1.0 SIP Server Phase 4
Network Device Protection Profile (NDPP) Extended Package SIP Server Version 1.1 SIP Server Phase 4
Protection Profile for VOIP Applications Version 1.3 VoIP Phase 4
Protection Profile for VOIP Applications Version 1.2 VoIP Phase 4 CY 2013, Q4
Protection Profile for Mobility - Voice Over IP Application Version 0.6 VoIP Phase 4
Extended Package for Voice and Video over IP (VVoIP) Version 1.0 VoIP Phase 4 CY 2016, Q3
Protection Profile for USB Flash Drives Version 1.0 USB Flash Drive Phase 4
Protection Profile for Web Browsers Version 1.0 Web Browser Phase 4 CY 2014, Q1
Extended Package for Web Browsers v2.0 Web Browser Phase 4
U.S. Government Protection Profile for USDA Instrument Grading System for Basic Robustness Environments Version 1.0 Miscellaneous Phase 4
None Miscellaneous Phase 4 none

Notes: The above estimated completion dates are subject to change. Each PP will need to be reviewed and depending on the comments received may require additional time to complete. The PP may also need additional time for public release co-ordination.