BSI Cybersecurity and Information Resilience (UK) Ltd is a company approved by NCSC to perform Commodity Assurance Services (CAS) assessments.
CAS assessments are conducted against a set of requirements which define what a good service looks like for each of the Commodity Service types. Currently, service requirements exist for Telecommunications and Sanitisation of storage media.
All CAS Service Providers are required to have a UK sales presence.
Service Providers should contact a CAS Company to confirm the suitability of their service for assessment against the relevant service requirement. Service Providers contract directly with the CAS Company.