International

The work within the national certification bodies under Common Criteria is internationally co-ordinated. This co-operation is called “Arrangement on the Recognition of the Common Criteria Certificates in the field of Information Technology Security” (CCRA), 23. May 2000. This implies that a product certificate for a product certified in one certificate producing country is also automatically valid in all member nations of the CCRA.

SERTIT is involved in CCRA through participation in four committees under the arrangement. The committees are Development Board (CCDB), Management Committee (CCMC), Executive Sub committee (CCES) and Maintenance Board (CCMB).

Mutual recognition of certificates

As a member of CCRA, Norway is obliged to recognise all CC certificates issued by other certificate producing member nations up to Evaluation Assurance Level 4 (EAL 4). IT products and systems have to be evaluated according to the international evaluation criteria Common Criteria.

Read more about mutual recognition of certificates...

Common Criteria web site.