Standards

FIPS 140-2

The US National Institute of Standards and Technology (NIST) developed the Federal Information Processing Standard (FIPS) 140 series of publications to coordinate the requirements and standards for cryptographic modules. Products to be validated to the FIPS-140-2 standard are evaluated and tested by the Cryptographic Module Validation Program (CMVP) which is jointly operated by NIST in the US and the Computer Security Division of the Canadian Government. A cryptographic module must meet all the standards of FIPS-140-2 including the standards for algorithm implementations before it is validated as FIPS-140-2 compliant. See more »

More information: FIPS-140-2 standard (pdf)

DIPCOG

DIPCOG - The Defence Infosec Product Co-operation Group is a UK Ministry of Defence forum run by a committee composed of representatives primarily from the MoD and CESG. The aim of DIPCOG is to provide an interface between the MoD and vendors of IT security products and services. Being a CCTM certified product DESlock+ (V3.27) is recommended by DIPCOG for MoD use.

CCTM

The CESG Claims Tested Mark is a UK government standard for computer security products (software and hardware). The Communications Electronic Security Group (CESG) is the UK national technical authority for information security. To achieve the Claims tested Mark vendors submit products to independent testing laboratories for evaluation against a set of claims. The laboratory's task is to provide quality assurance by determining if the product performance meets the claims. Successful products that meet the criteria and pass the evaluation process are then awarded the CCTM certification and are considered CESG certified products.

More information: CCTM website

Buying Solutions

Buying Solutions is the national procurement partner for all UK public services providing access to over 500,000 products and services through more than 1,500 suppliers. The Buying Solutions customer base includes the biggest central government departments, NHS Trusts and local councils, through to the smallest schools.

ISO

ISO9000 is a family of standards used within a quality management system developed by the International Organisation for Standardization. The standard relies on a company having a quality control procedure in place for the key processes in the business such as checking quality control, monitoring processes, record keeping, review and continued development. DES was certified as ISO 9001 compliant in 2000.

More information: ISO website