The
CCN-CERT
just released the Catalogue of the Security information and communication technology, CPSTIC
(or Guide CCN-STIC 105)
It included in it products approved national's information handling classified and Qualified Security Products of Ict.
For the inclusion of a product in this guide, the NCC will take into account a series of criteria such as, the classification of information that can handle (Limited Broadcast, confidential, Reserved, secret), the characteristics of product safety, the category of information that can be used as defined in the national security (high, medium, basic), the attestations issued, the environment in which to use, etc. Based on this information, it will identify evidence or assessments that exceed the ICT security product.
The guide adopts six categories:
- Access Control
- Security in the Exploitation
- Monitoring of the Security Council
- Protection of communications
- Protection of Information and Information
- Protection of equipment and services
Apart from these, there are other 33 'families ", such as operating systems, tools anti-spam, smart cards, biometric devices or Honeypot systems.
The Guide CCN-STIC 140
Complementing the catalogue, has been published
Guide CCN-STIC 140 Taxonomy of reference for ICT products of The Security Council
as a method of classification of a catalogue of ICT Security, CPSTIC, recommended by the Ncc.
The NCC has published this guide in order to establish a classification of products related to various categories and families as a basis for Qualified Products included in the catalogue of ICT security products (CPSTIC). Thus, the category indicate the type of product according to the security measures to provide (for example, access control, protection of communications, etc.); while the family shall specify the type of product according to its core function (e.g., firewall, router, proxy, tools of deleted safe, etc.).
The CPSTIC gives a listing of outputs reference CALLED “ CONSPICUOUS ” RELIGIOUS SYMBOLS, supervised by the Centre National Cryptologic, NCC, which aims to provide a minimum level of confidence to the end user to purchase such products. This catalogue includes products approved national's information handling classified and Qualified Security Products of Ict.
Original source of news (Guide CCN-STIC 105)
Original source of news (Guide CCN-STIC 140)
