IT Security Product Evaluations

If your company develops IT security products for government, financial institutions or the payment industry, you may find that not having those products certified or validated can leave you at a disadvantage in the marketplace. The EWA-Canada IT Security Evaluation & Test Facility (ITSET) is a fully accredited, third-party (i.e. vendor-neutral) facility that provides a number of services to help you ensure your products are compliant with the rigorous requirements of U.S. and international IT security, information assurance and data protection standards. EWA-Canada ITSET services include the following:

Common Criteria

Accredited by the Standards Council of Canada (SCC) and approved by the Canadian Communications Security Establishment (CSE) to perform evaluations against the Common Criteria for Information Technology Security Evaluation (CC) (also known as International Standard ISO/IEC 15408) under the Canadian Common Criteria Evaluation and
Certification Scheme (CCS).  CC evaluations, performed under the CCS up to Evaluation Assurance Level (EAL) 4+, are fully recognized in the US and all other countries who are signatories to the Arrangement on the Recognition of Common Criteria Certificates (CCRA).

 

Cryptographic & Security Testing

Accredited by the National Voluntary Laboratory Accreditation Program (NVLAP; Lab code 200556-0) and the National Institute of Standards and Technology (NIST) to conduct the following:

Under the Cryptographic Module Validation Program (CMVP) EWA-Canada is accredited to carry out testing of cryptographic modules in accordance with the requirements of FIPS PUB 140-2 to all security levels (1 through 4).

Under the Cryptographic Algorithm Validation Program CAVP EWA-Canada is accredited to carry out testing of vendor implementations of FIPS-approved and NIST-recommended cryptographic algorithms.

Under the NIST Personal Identity Verification Program (NPIVP) EWA-Canada is accredited to carry out:

    • Testing of Personal Identity Verification (PIV) card applications; and
    • Testing of PIV middle-ware

Under the Security Content Automation Protocol (SCAP) Validation Program EWA-Canada is accredited to carry out testing of vendor products for conformance to the SCAP component standards and capabilities, including Federal Desktop Core Configuration (FDDC) Scanner.

Payment Assurance

Electronic Warfare Associates-Canada (EWA-Canada) is positioned at the forefront of EMV implementations in Canada, and we provide payment product vendors with a single point of contact regarding product testing and certification services. EWA-Canada's Payment Assurance Services better prepares your organization for compliance with new security standards and existing legal requirements. We are well-versed in the issues that face our financial sector clients.

 

Please Contact Us for further information.