Security Profile (SP) - Your Security Blueprint
Imagine your IoT product - whether it's a smart camera, mobile phone, thermostat, or an industrial machine - as a house. Now, before you build that house, you need a blueprint that shows where everything should go to make it safe and secure.
A Security Profile is like that blueprint for your product's security. It lists out all the security requirements tailored to what your product is and how it'll be used. This way, you can focus your efforts where the risks are highest, helping you save time and money.
Protection Profile (PP) - The Generic Security Standard
You want to make sure your house (product) is up to standard, but what standards should you follow? That's where the Protection Profile (PP) comes in.
A PP is a set of standard security rules, checked and approved by experts, that you can follow for a range of products. Think of it as a trusted set of guidelines that ensures you're building your house right, no matter what kind of house it is.
The PP also has something called an Evaluation Assurance Level (EAL) or Substantial and High when EUCC is applied. This tells you how thoroughly the security has been checked and tested. The higher the level, the more rigorous the evaluation!
Security Target (ST) - Your Product's Customized Security Plan
Now, your house (product) might have some unique features. Maybe it has a special room or specific needs that the generic blueprint (PP) doesn't cover.
A Security Target (ST) is your customized security plan. It takes the general rules from the PP and tailors them specifically to your product. If your product fits into more than one category, you can use multiple PPs to create the perfect ST for you.
What We Offer
Securing Your Connected World: Tailored Services for Robust Cybersecurity
Preparation - Ready for Success
- Security Analysis: Understanding your product's environment, type, sensitivity of assets, and potential threats.
- Requirements Gathering: Understanding your specific needs, whether it's a consumer gadget or an industrial control system.
- Scope Definition: Outlining the extent of the security measures, ranging from the physical chip to cloud integration
- Regulatory Compliance: Ensuring that all necessary legal and industry standards are identified and considered.
Creation - Building with Precision
- Security Profile Development: Creating a tailored plan that encompasses your unique product characteristics.
- Protection Profile Creation: From TOE definition to SFRs and SARs adapted them to the market specific needs.
- Security Target Crafting: Designing a custom security target that may combinesone or more PPs to meet your product's individual requirements.
Evaluation/Certification - Provide Trust
- Security Evaluation: Conducting rigorous testing and analysis to ensure the security consistency of the profiles with regards to an actual product and the rules defined in the applid standard.
- Certification Assistance: Guiding you through the Common Criteria (CC) or FITCEM certification process.
- Ongoing Support: Providing continued support to maintain and enhance security post-certification.
