|
| Register for our Free Newsletters |
|
 |
|
|
|
|
|
|
|
|
| Other Carouselweb publications |
|
|
|
|
|
|
|
|
|
|
| |
|
|
|
|
|
Common Criteria Certification for PGP Universal Server
|
|
PGP (GB)
: 10 December, 2008 (New Product) |
|
|
EAL2 Certification achieved by PGP Corporation for its Universal Gateway Email Server |
|
PGP Corporation has announced that PGP Universal Server and PGP Universal Gateway Email have completed the rigorous Common Criteria Evaluation Assurance Level 2 (EAL2) certification. PGP Universal Gateway Email provides centrally, standards-based email encryption to secure communications with customers, partners and employees. By encrypting data at the gateway, PGP Universal Gateway Email ensures that data is protected from unauthorised access in transit over the public Internet and at rest on a recipient's mail server.
"Enterprises operating globally have to meet and comply with a wide spectrum of domestic and international compliance laws and regulations," said Jon Callas, chief technology officer of PGP Corporation. "PGP Corporation has always been at the forefront of certifying and validating its products with all the industry regulations so that our global customers can be assured that their data is protected and secured."
Common Criteria evaluation of security products is important for global enterprises and frequently mandated for commercial information security products purchased by governments worldwide, including the US government for use in national security systems. The Canadian Communications Security Establishment's (CSE) Common Criteria Evaluation and Certification Scheme (CCS) is globally recognised as a certificate member of the Common Criteria Mutual Recognition Arrangement (CCRA). The certification of PGP Universal Server and PGP Universal Server Gateway Email validated by the Communications Security Establishment Canada (CSEC) provides customers with confidence that PGP Corporation's products meets and/or exceeds the requirements for which it was tested and evaluated.
Common Criteria is an internationally recognised set of guidelines (ISO 15408), that define a common framework for evaluating security features and capabilities of Information Technology security products. The standard consists of several predefined evaluation assurance levels, each one more stringent than the last. Common Criteria provides assurance that the process of specification, implementation and evaluation of a computer security product has been conducted in a rigorous and standard manner.
Common Criteria certification of security products is mandated by the US government for federal purchases. The National Information Assurance Acquisition Policy, NSTISSP No. 11, requires agencies to purchase only those commercial security products that have met specified third-party assurance requirements and have been tested by an accredited national laboratory.
Common Criteria enables vendors to have their products tested against a chosen level by an independent third-party testing laboratory. To complete this certification, PGP Corporation partnered with Corsec Security and DOMUS IT Security Laboratory for Common Criteria and AEGISOLVE, Inc. for FIPS certification. Corsec is a consulting firm with over ten years of validation experience. DOMUS is an accredited Common Criteria and FIPS test laboratory based in Ottawa, Canada with over 12 years of experience. AEGISOLVE, Inc. is a computer security laboratory accredited by the U.S. Department of Commerce and National Institute of Standards and Technology for FIPS 140-2 validation.
PGP Whole Disk Encryption is also undergoing the Common Criteria Evaluation Process.
PGP Corporation continues its commitment to protect the world's most sensitive data and to provide its customers with the assurance that the protection PGP Corporation offers has met the most stringent testing standards.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
