[vc_row][vc_column][vc_column_text]As you release new versions of previously certified and validated products, it is crucial that you develop a security certification maintenance plan to keep up with the evolution of your technology. Corsec\u2019s Maintenance and Compliance Service helps you\u00a0determine whether a full re-evaluation is necessary, or if you\u00a0can pursue other measures to continue generating revenue from your\u00a0initial certification or validation.[\/vc_column_text][vc_column_text]<\/p>\n

Security Certification Maintenance:<\/strong><\/h5>\n

Each security certification has its own unique requirements for maintenance and renewal. Corsec\u2019s engineering team helps you\u00a0understand the specific actions you\u00a0will need to take for each of their products and certifications.<\/p>\n

FIPS 140-2<\/span><\/a>
\nThe FIPS 140-2 validation process lists five change scenarios that are used to determine if a product requires revalidation, or if documentation alone can address the changes at issue. Corsec will help determine which scenario mostly closely aligns to the latest version of your\u00a0product.<\/p>\n

Common Criteria<\/span><\/a>
\nCommon Criteria determines re-evaluation through a process called Assurance Continuity (AC). If major changes have occurred in the security environment, evidence needs to be submitted to a laboratory and the product needs to be re-evaluated. If minor changes have occurred, a vendor can perform \u201cAssurance Maintenance,\u201d a report that is attached as an addendum to the original product certification, as long as it is within two\u00a0years of the initial issuance date.<\/p>\n

DoDIN APL<\/a><\/span>
\nIn order to maintain a listing on the DoDIN APL, you\u00a0must complete a Desktop Review (DR) for each major product version. In such a review, a high-level assessment determines whether the product listing will simply be updated with the new version identifier, whether minimal testing must be performed on the new version prior to receiving an updated listing, or whether the product must undergo a new evaluation in its entirety.[\/vc_column_text][vc_column_text]<\/p>\n

Keep Products Market-Ready<\/strong><\/h5>\n

Corsec helps ensure that our partners continue to benefit from the efforts they put in initially to get their products certified or validated. If you have questions on the requirements around your products\u2019 recertification or revalidation, we can help determine the best path forward with little to no disruption of your revenue stream.[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

[vc_row][vc_column][vc_column_text]As you release new versions of previously certified and validated products, it is crucial that you develop a security certification maintenance plan to keep up with the evolution of your technology. Corsec\u2019s Maintenance and Compliance … <\/p>\n

Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":17818,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[15,127,5,91,9],"tags":[82,25,128,4,101,100,39,8],"class_list":["post-9400","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-common-criteria","category-dodin-apl","category-fips-140-2","category-security","category-uc-apl","tag-certification-process","tag-common-criteria","tag-dodin-apl","tag-fips-140-2","tag-reevaluation","tag-revalidation","tag-security-certifications","tag-uc-apl","infinite-scroll-item","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","no-featured-image-padding"],"yoast_head":"\n