What is CC NIAP?
Common Criteria is an internationally recognized ISO standard (ISO 15408) for the evaluation of Information Technology (IT) products. The Common Criteria certification evaluates Commercial-Off-The-Shelf (COTS) Information Technology products for conformance to the international Common Criteria.
National Information Assurance Partnership (NIAP) certification is the US certification program that evaluates commercial product compliance against the International Common Criteria. Administered through the National Security Administration’s (NSA) Cybersecurity Collaboration Center, the product evaluations are based upon established Protection Profiles and conducted by certified, third-party testing laboratories. NIAP certification is a requirement for using commercial software in connection with US Federal National Security Systems (NSS) per Committee on National Security Systems Policy No. 11 (CNSSP‑11).
What is CSfC?
Commercial Systems for Classified, or CSfC, is another program administered by the NSA. It takes NIAP/CC certification a step further by evaluating product suitability for handling classified data. Products must be NIAP certified and fit within the established “capabilities packages” defined as part of the CSfC program. Therefore, award of CSfC always trails after NIAP certification.
Products in scope
The following Omnissa products are in scope for the NIAP & CSfC programs. Buyers should confirm official status of the specific service and deployment environment before relying on these certifications for procurement purposes.
| Omnissa product | CC NIAP | CSfC |
|---|---|---|
| Horizon & UAG | In-process with lab | Planned (registration will follow NIAP) |
| Workspace ONE UEM | In-process with lab | Planned (registration will follow NIAP) |
| Workspace ONE Boxer | In-process with lab | Planned (registration will follow NIAP) |
| Workspace ONE Tunnel | In-process with lab | Planned (registration will follow NIAP) |
Frequently asked questions about CC NIAP & CSfC
Each program maintains a list of in-process, certified, and sunset products. Reference these for current, official product status:
Common Criteria | NIAP | CSfC
Certification lifecycle varies by program. Generally, CC certification is good for 6 years, NIAP for 2-3, and CSfC typically 1 year. Refer to the product certification listing for official dates.