CESG Logo
 
The National Technical Authority for Information Assurance
 
CESG Web logo
The Government’s Information Assurance flagship conference 14-15 Sep 2010.
Public & Private Sector rates reduced. For more details see the IA10 page.
  ABOUT US   PRODUCTS & SERVICES   PUBLICATIONS   POLICY & TECHNOLOGIES   FIND A .....
Common Criteria & ITSEC
Introduction
Certified Products
CLEFs
Common Criteria Assurance Levels
Directory of Infosec Assured Products (pdf)
Formal Documentation
International Links
Introductory Guides
ITSEC Assurance Levels
Joint Interpretation Library
Security Evaluation Criteria
Structure of the UK Scheme
UK Evaluator Training Material
UK National Interpretations for Common Criteria
Scheme FAQs
Scheme History
Common Criteria portal

CC Business Questionnaire (doc)

In Evaluation Web Entry Form (doc)

 
History of the Scheme

In 1985, the UK Government's Communications Electronics Security Group (CESG), as the technical authority for HMG electronic security, established evaluation facilities for carrying out security evaluations of government computer systems. These facilities were the forerunners of today's CommerciaL Evaluation Facilities (CLEFs).

In 1987, the UK Department of Trade and Industry (DTI) established the Commercial Computer Security Centre to examine the application of formal security evaluation to commercially available IT products. This resulted in the publication of a set of evaluation criteria and an outline scheme for their operational use known as "the Green Books". These criteria were tested during 1989 and underwent wide consultation with industry.

It was realised that greater benefits would be gained from a single scheme and accordingly, in December 1989, a new joint CESG/DTI scheme was announced - the UK IT Security Evaluation and Certification scheme, usually abbreviated to the "UK ITSEC scheme". The Scheme commenced on 4 July 1990 and became fully operational on 1 May 1991.

Mission Statement

The objectives of the Scheme are to meet the needs of Industry and Government for cost effective and efficient security evaluation and certification of IT products and systems. The Scheme also aims to provide a framework for the international mutual recognition of certificates.
Products Footer image
 © Crown Copyright, 2010. This CESG Website is maintained for your personal use and viewing. Access and use by you of this site constitutes acceptance of our terms and conditions which take effect from the date of first use. Click here for our terms and conditions CESGweb@cesg.gsi.gov.uk