Business Issues -> Compliance
Released: 5th November 2013
Publisher: TÜV SÜD Product Service
TÜV SÜD Product Service has just completed its first TEMPEST certification following its appointment by CESG, the UK’s National Technical Authority for Information Assurance, as a TEMPEST Test Facility for communications technology used by governments and NATO.
TÜV SÜD applied highly developed processes and worked closely with Cassidian experts, reducing test and certification times by 90 percent on the previously expected timescale for Cassidian’s new IP encryption device, Ectocryp Yellow.
Previously the test and certification process could only be completed by CESG, which could add significant time to complete the process. CESG therefore created an improved TEMPEST scheme to allow independent test houses to run the certification process on its behalf under a strict set of conditions.
Paddy Francis, Chief Technical Officer, Cassidian CyberSecurity, said: “Working directly with TÜV SÜD has enabled us to significantly reduce both the time and cost of the certification process, without compromising on the depth, scope and rigour of testing.”
TÜV SÜD Product Service is a TEMPEST Test Facility under the CESG Formal TEMPEST Certification Scheme (CFTCS) and is accredited to evaluate and certify products on behalf of CESG. The CFTCS ensures that compromising emanations from Information & Communications Technology (ICT) equipment are within the limits defined in NATO standards.
About TEMPEST & the CFTCS
TEMPEST and Electromagnetic (EM) Security are about understanding the vulnerabilities associated with radio frequency emanations from Information Communication Technology (ICT) equipment, systems or mobile platforms processing classified information. TEMPEST relates purely to passive phenomena while Electromagnetic Security may apply to active techniques to enhance or extract signals of interest.
The CFTCS seeks to achieve assurance based on compliance at every stage of a product’s life, from its initial design onwards. It supports the Government’s UK Cyber Strategy, ensuring that TEMPEST services comply with the updated NATO SDIP-55 standard and is compatible with the EU’s IASG4-04 standard.
About Cassidian www.cassidian.com
Cassidian, the security and defence division of EADS, is a worldwide leader in defence and security solutions. The company delivers advanced defence systems along the whole action chain from sensors through command & control systems to combat aircraft and unmanned air systems. In the area of security, Cassidian provides customers worldwide with border surveillance systems, cyber security solutions and secure communications. In 2012, Cassidian – with around 23,000 employees – achieved revenues of € 5.7 billion.
About TÜV SÜD Product Service www.tuv-sud.co.uk
TÜV SÜDProduct Service is one of the world’s leading experts in product testing and certification, with 150,000 product certificates in circulation globally. TÜV SÜDProduct Service analyses over 20,000 products each year in Europe, Asia-Pacific and the Americas, ensuring that products are safe, reliable and compliant and minimising liability risks for manufacturers, importers and retailers.
TÜV SÜD Product Service’s sister company, TÜV SÜD BABT, is the world’s leading radio and telecommunications certification body, and is a Notified Body under the European Union’s Marine Equipment and R&TTE Directives.
For further information please contact:
Published by: IT Analysis Communications Ltd.
T: +44 (0)190 888 0760 | F: +44 (0)190 888 0761