Cyber Resilience Test Facilities
In this scheme
Information for CRTFs
CRTFs deliver cyber resilience testing for a wide range of internet connected products. Not only will this raise the bar for cyber resilient product development, it will also widen the range of cyber products that can be assured, while ensuring that this is performed consistently and uniformly.
CRTFs will ensure that modern cyber security assurance approaches, particularly Principles Based Assurance (PBA), can be used to better help security risk decision makers.
To enable evidence and assessment against principles in a consistent way, the NCSC has created a set of artefacts called Assurance Principles & Claims (APCs). CRTFs will use the appropriate APC set to define the relevant security outcomes.
What will CRTFs do?
The NCSC expects its Cyber Resilience Test Facilities to be able to:
- Evaluate vendor-supplied evidence to demonstrate where the product meets the claims set out in the APCs.
- Identify gaps in evidence and describe the associated risk, to provide vendors and end customers with an appropriate level of information to satisfy their risk appetite.
- Effectively communicate this to vendors, using the standardised output report format.
Requirements for CRTFs
To become a Cyber Resilience Testing Facility (CRTF), it is necessary that your organisation is able to demonstrate the following criteria to NCSC:
- Completion of training and assessment in the application of Principles Based Assurance (PBA).
- Conduct a Trial Evaluation in order to provide the evidence necessary for UKAS ISO/IEC 17020 accreditation and to demonstrate the ability to conduct a full CRT assessment including the production of the required output reports
- Sign a contract with NCSC, agreeing to carry out Cyber Resilience Testing (CRT) in line with expectations and ongoing continual improvement of processes.
Application process
Before you apply, please ensure you have read and understood the requirements and downloaded the relevant documents from the Scheme Documents page or the Downloads section on this page.
If you wish to apply or for more information contact our CRTF team: [email protected]
At the NCSC, we are taking action to remove artificial barriers to entry. So, if you spot something which you think unfairly prevents you from applying, please let us know using our feedback form.