PORTFOLIO

What is a CCT Mark?
A CSIA Claims Tested (CCT) Mark is a Government quality mark for information security products and services which is administered by the Central Sponsor for Information Assurance (CSIA), part of the Cabinet Office. Products and services that are awarded this mark will have been independently tested by an accredited test laboratory to confirm that the security claims stated in their marketing have been verified.

The CSIA's Head of Assurance and Standards has stated that Government information systems must use appropriate security products and services which have a minimum assurance of the CCT Mark.

The CCT Mark process
A company wishing to obtain a CCT Mark for their product or service produces an Information Assurance Claims Document (ICD) which includes a statement of all the security functionality being claimed.

The ICD, together with a CCT Mark application form, is then submitted to the CCT Mark Scheme Secretariat for acceptance and approval of the ICD.

Once the ICD has been approved, a CCT Mark Test laboratory can begin validating the claims and provides a report summarising the results to the Scheme Secretariat.

If the claims testing is successful, a CCT Mark will be awarded.

Why choose the EDS CCT Mark laboratory?

• A track record of meeting or exceeding the customer's expectations on timescale and cost.

• Unequalled experience with the CCT Mark scheme having been involved with the Scheme from its inception. EDS participated in both the initial trial and pilot phases of the Scheme, providing valuable feedback to the CSIA to enable them to develop the Scheme.
• Experienced security testers who have extensive experience of testing against the ISO 17025 standard mandated for CCT Mark testing.
• Culture of delivering added value to the customer, for example carrying out the testing at customer's site where this saves costs; using the ICD as the basis for an Common Criteria Security Target.
• Can offer a cost effective route from a CCT Mark to an internationally recognised Common Criteria Certificate.