Off the shelf service

Commodity Information Assurance Services

Created:  28 Aug 2015
Updated:  06 June 2016
Certified Services

Confidence in the security of these services is provided by assessment against predefined Service Requirements which define what a good service looks like for each specific Service type.

Procuring a certified commodity service

If you wish to procure a Certified Service, please see the current list by using the View All option at the base of the page.

Having your commodity service assessed

Service Requirements (see Downloads tab) describe the properties we expect a Service to exhibit, using policy and guidance and our understanding of technologies being employed.

  • Only Services which include a security-enforcing function will be assessed
  • All vendors are required to have a UK sales presence
  • Service Providers will need to understand the Service Requirement that relates to their Service and ensure that their Service is developed to support those requirements
  • Independent Evaluation Facilities (the CAS companies) approved by the NCSC carry out the assurance assessment. Here is a very quick overview of the process. Relevant documents can be found under the Downloads tab or collected here.
  • Service Providers are expected to provide technical assistance to our evaluation partners (the CAS companies) during assessment to ensure a good understanding of the entire Service provision undergoing assessment

Assessments against Service Requirements are normally undertaken by one of our approved companies and certified by us.  Service Providers should contract directly with a CAS company. In special cases, for example assessments against the PKI CA Service Requirement, we undertake the assessment and certification. For general enquiries please contact the NCSC Enquiries team.

Process for performing CAS assessments v1.3.pdf

PDF, 457.92KB

This file may not be suitable for users of assistive technology.

CESG_Test_Laboratory_General_Requirements_v2-1.pdf

PDF, 179.99KB

This file may not be suitable for users of assistive technology.

CESG Assured Service Requirement PSN CA (IPSEC) v1.pdf

PDF, 268.28KB

This file may not be suitable for users of assistive technology.

CESG Assured Service Requirement Sanitisation v2.pdf

PDF, 469.44KB

This file may not be suitable for users of assistive technology.

CESG Assured Service Requirement Telecomms v1-1.pdf

PDF, 336.02KB

This file may not be suitable for users of assistive technology.

CESG Test Lab Application Questionnaire v1 July 2012

CESG TEST LAB APPLICATION QUESTIONNAIRE V1 JULY 2012, 100KB

This file may not be suitable for users of assistive technology.

Off The Shelf services

Was this information helpful?

We need your feedback to improve this content.

Yes No