About
Subscribe
  • Home
  • /
  • Computing
  • /
  • CA security solutions receive a CCL3 certification

CA security solutions receive a CCL3 certification

Johannesburg, 27 Jul 2007

CA has announced that three of its security management solutions - CA Integrated Threat Management r8, CA Access Control for Windows r8, and CA Directory r8.1 - have achieved Common Criteria Evaluation Assurance Level 3 certification from the National Information Assurance Partnership (NIAP) Common Criteria Evaluation and Validation Scheme (CCEVS).

This level of security certification independently validates the quality and efficacy of these three CA solutions.

"These certifications confirm CA's ability to deliver the strong protection that customers need to safeguard their complex enterprise computing environments from today's extremely harmful and diverse range of cyber-threats - while also facilitating the fast, highly automated enablement of business services wherever they're needed," says Bilhar Mann, senior vice-president of security management at CA.

"CA continues to deliver technologies that uniquely enable IT organisations to cost-effectively address the full range of challenges they face in today's highly dynamic and interconnected business environment."

CA completed its Common Criteria evaluation and certification through Cygnacom Solutions' Common Criteria Testing Laboratory, which is accredited by the National Voluntary Laboratory Assessment Programme and approved by the National Information Assurance Partnership (NIAP). CygnaCom performed the evaluations in accordance with the NIAP's Common Criteria Evaluation and Validation Scheme.

CA Integrated Threat Management r8 provides comprehensive, scalable protection against malware, spyware, blended threats, and other forms of malicious code across the enterprise - enabling customers to effectively minimise risk and downtime while reducing security workloads.

CA Access Control r8 protects business critical infrastructure and minimises security risks by regulating access to confidential business data and mission-critical services. CA Access Control provides the necessary system-level access control, cross-platform policy management, operating system hardening and secure auditing capabilities for organisations to effectively protect their mission-critical server infrastructure and maintain regulatory compliance.

CA Directory r8 enables organisations to accelerate time-to-market, reduce development and administration costs, and efficiently maintain maximum security. It delivers assured performance, reliability and virtually unlimited scalability. CA Directory has an extremely fast response time, and takes full advantage of industry open standards to deliver the most flexible directory on the market.

Other CA products already certified under Common Criteria include CA Single Sign-On v7, CA Audit r8, CA Admin v8 and CA Security Command Center r8.

Karel Rode, solutions strategist at CA Africa, says Common Criteria Certification creates trust among agencies by assuring them that the solution meets specific requirements. "For example, the CA Directory works very well with PKI, OCSP, Secure Storage modules and other solutions to provide strong authentication, and is most often selected as the platform of choice for such solutions because of its CCC early in the design phase," he concludes.

Share

Common Criteria

The National Institute of Standards and Technology (NIST) and the National Security Agency (NSA) established the National Information Assurance Partnership (NIAP) to evaluate IT product conformance to the Common Criteria for Information Technology Security Evaluation, an international standard. The programme, officially known as the NIAP Common Criteria Evaluation and Validation Scheme (CCEVS), is a partnership between the public and private sectors to help organisations select commercial off-the-shelf information technology (IT) products that meet their security requirements and to help manufacturers of those products gain acceptance in the global marketplace. Twenty-two countries now recognise the Common Criteria as the official third-party evaluation criteria for IT security procedures.

CygnaCom Solutions

CygnaCom Solutions, a subsidiary of Entrust, has provided professional information security services and cryptographic solutions to government and business clients since 1994. CygnaCom, with headquarters in McLean, Virginia, provides a wide range of consulting services and customised solutions to help clients develop, implement and maintain information security programmes, policies and strategy. Through its accredited laboratories, CygnaCom is also a one-stop provider of comprehensive US standards-based security testing and evaluation services for IT and cryptographic products.

CA

CA (NYSE: CA), one of the world's largest information technology (IT) management software companies, unifies and simplifies the management of enterprise-wide IT. Founded in 1976, CA is headquartered in Islandia, New York, and serves customers in more than 140 countries. For more information, please visit http://ca.com.