The project is funded by the National Centre for Research and Development under the Cybersecurity and Digital Identity Program \u2013 CyberSecIdent.<\/p>\n
Title: National Scheme for the Evaluation and Certification of Security and Privacy of IT Products and Systems in Compliance with Common Criteria (KSO3C)<\/p>\n
The KSO3C project is a joint initiative of three scientific and research institutions operating under the supervision of the Minister of Digital Affairs: the National Institute of Telecommunications \u2013 Institute of Innovative Technologies. Instytut \u0141\u0105czno\u015bci \u2013 Pa\u0144stwowy Instytut Badawczy (Consortium Leader), Naukowa i Akademicka Sie\u0107 Komputerowa \u2013 Pa\u0144stwowy Instytut Badawczy oraz Sie\u0107 Badawcza \u0141ukasiewicz – Instytut Technik Innowacyjnych EMAG.<\/p>\n
Agreement No. CYBERSECIDENT\/381282\/II\/NCBR\/2018<\/p>\n
Project Manager from the Instytut \u0141\u0105czno\u015bci \u2013 Dr. Eng. El\u017cbieta Andrukiewicz
\nFrom the Naukowa i Akademicka Sie\u0107 Komputerowa \u2013 Pawe\u0142 Kostkiewicz
\nFrom the \u0141ukasiewicz \u2013 EMAG \u2013 M.Eng. Dariusz Rogowski <\/p>\n
PROJECT GOAL:<\/p>\n
The purpose of the project is to develop and implement a scheme in Poland for the evaluation and certification of IT product security and privacy in compliance with a widely recognized standard for IT security assessment: PN-ISO\/IEC 15408 Information Technology \u2013 Security Techniques \u2013 Evaluation Criteria for IT Security, commonly known as \u201cCommon Criteria.\u201d This standard outlines a series of requirements for designing and assessing the security of IT products. These security measures are characterized by a justified level of confidence in the effectiveness and efficiency of protections, confirmed through independent evaluations performed by licensed testing laboratories.
\nAs a result of the project, two security assessment laboratories will be established in Poland, located at Instytut \u0141\u0105czno\u015bci \u2013 PIB and \u0141ukasiewicz \u2013 EMAG. These laboratories will be overseen by a certification body at NASK\u2013 PIB, which will issue certificates for IT products that successfully pass the assessment process.
\nCompliance certificates with Common Criteria for evaluated IT products, issued within the Polish scheme, will be recognized by the most economically advanced countries of the European Union and worldwide. The Polish system for assessing and certifying the security of IT products and services aligns with the European Commission\u2019s initiatives aimed at creating a European cybersecurity certification framework. <\/p>\n
PLANNED OUTCOMES:<\/p>\n
The main deliverables of the project include:<\/p>\n
Organizationally, procedurally, and technically prepared for operational activities, two conformity assessment laboratories at Instytut \u0141\u0105czno\u015bci \u2013 PIB and \u0141ukasiewicz \u2013 EMAG will be established and accredited in compliance with the PN-EN ISO 17025 standard.
\nAn organizationally and procedurally prepared certification body at NASK-PIB (Research and Academic Computer Network \u2013 National Research Institute), which will obtain accreditation in compliance with the PN-EN ISO 17065 standard.
\nCommon Criteria compliance certificates for at least two IT products evaluated in the assessment laboratories.
\nAn operationally ready evaluation and certification scheme capable of issuing Common Criteria certificates at EAL 1-4 levels.<\/p>\n
Project value: PLN 24,322,325.28, including funding of PLN 24,164,009.28<\/p>\n