Cyber Resilience Test Facilities
CRT eLearning module
eLearning module designed to help vendors and their customers understand the CRT process and its benefits.
This training is split into five core sections. These will help you understand:
- What Cyber Resilience Testing (CRT) and Principles Based Assurance (PBA) are.
- What Assurance Principles and Claims (APC) are.
- What CRT involves and your role in the process.
- The types of evidence that vendors need to provide.
- What a Product Assessment Report (PAR) is and covers.
About Cyber Resilience Testing (CRT)
Cyber Resilience Testing, known as CRT, is a service that assesses the confidence that a product can protect itself against common cyber attacks when connected to the internet.
This is achieved through the evaluation of the design, build, and ongoing support of the product throughout its lifetime and allows vendors to demonstrate how well their product satisfies the NCSC principles of good engineering practice. The assessment report documents any potential risks associated with the product and these are communicated in non-technical terms to potential customers. This enables customers to make informed decisions and differentiate between products whilst supporting their appropriate use.
CRT uses the Principles Based Assurance (PBA) methodology providing more flexible and continuous assurance and is fully aligned with DSIT’s Software Security Code of Practice. It has a focus on software but also addresses some additional security features relevant to connected products.
