Agencies to review Common Criteria

NIAP

Federal civilian agencies will soon review the potential benefits of an international security standard as a guide for commercial software purchases, according to Karen Evans, the new administrator of the Office of Management and Budget's Office of E-Government and Information Technology.

The Bush administration's National Strategy to Secure Cyberspace includes a plan to review the national security community's use of the Common Criteria Evaluation and Validation Scheme. That review is an important part of determining how to improve IT security in civilian agencies, Evans told the House Government Reform Committee today.

In the United States, the National Institute of Standards and Technology and the National Security Agency's National Infrastructure Assurance Partnership (NIAP) oversee Common Criteria implementation. Products that pass are certified that they will do exactly what the vendor says.

The Defense Department since July 2002 has required Common Criteria certification for all its security-related purchases. OMB's review will look at whether that has improved DOD's cybersecurity. Civilian agencies also need to know if it can help, Evans said.

"The review will consider to what extent, if any, NIAP can address the continuing problem of security flaws in commercial software products," she said.

There have been many questions about Common Criteria's usefulness and effectiveness, and committee Chairman Rep. Tom Davis (R-Va.), said he will keep track of the review.

Featured

  • Contracting
    8 prototypes of the border walls as tweeted by CBP San Diego

    DHS contractors face protests – on the streets

    Tech companies are facing protests internally from workers and externally from activists about doing for government amid controversial policies like "zero tolerance" for illegal immigration.

  • Workforce
    By Mark Van Scyoc Royalty-free stock photo ID: 285175268

    At OPM, Weichert pushes direct hire, pay agent changes

    Margaret Weichert, now acting director of the Office of Personnel Management, is clearing agencies to make direct hires in IT, cyber and other tech fields and is changing pay for specialized occupations.

  • Cloud
    Shutterstock ID ID: 222190471 By wk1003mike

    IBM protests JEDI cloud deal

    As the deadline to submit bids on the Pentagon's $10 billion, 10-year warfighter cloud deal draws near, IBM announced a legal protest.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.