E-Cop takes Singapore route to CC certification

22.07.2005
Von Connie Chng

Infosecurity solutions and services company e-Cop Pte. Ltd. has joined Patchlink Corp. in choosing to carry out Common Criteria (CC) evaluation and certification of its products in Singapore. E-Cop announced it has embarked on the process to certify its flagship security solution, Cyclops Enterprise Security Management (CESM), in accordance to the CC scheme.

The Infocomm Development Authority of Singapore (IDA) recently announced that it has established the CC Scheme to provide an infrastructure for ICT companies worldwide to evaluate and certify their security products against the CC standard (ISO 15408) in Singapore. ?Cyclops ESM is the preferred solution by governments and enterprises due to its intelligence in pre-empting online threats and in protecting networks proactively against unauthorized intrusions. As such, we are keen to reinforce the trust and confidence in our solution by having it assessed by CC at a more stringent test criteria at EAL 4 (product evaluation level 4),? said Eddie Chau, president and chief executive officer of e-Cop.

Last month, Patchlink, a provider of security patch, vulnerability and compliance management solutions, announced its plans to work towards EAL 3 certification for its products through T-Systems in Singapore.

The CC Scheme is part of IDA?s plan to develop internationally compliant security products in Singapore. It is also one of the strategic thrusts under the Infocomm Security Masterplan to build capabilities that can defend Singapore?s critical infrastructure from cyber attacks, and to maintain a secure infocomm environment for the government, businesses and individuals.

Said Chan Yeng Kit, chief executive officer, IDA Singapore, ?With the key (CC) ingredients in place, Singapore is now equipped with the competencies and infrastructure to offer solution providers a cost competitive, efficient and reliable means to obtain CC evaluation and certification. The CC-certified products will in turn gain worldwide recognition and access to the US$2.3 billion ($3.9 billion) worldwide market for CC-certified products.?

IDA has partnered PSB Certification who will take the role of the Certification Body to validate and certify the evaluation done by Evaluation Facilities.

In addition, IDA has partnered T-Systems to establish Singapore?s first Evaluation Facility to conduct product evaluation in accordance to Common Criteria. Thomas Jakob, chief executive officer, T-Systems Singapore, said Singapore, with its solid infrastructure and trusted business environment, is the ideal launch pad to serve the emerging Asia Pacific market for infocomm security services.

Singapore officially signed the Common Criteria Recognition Arrangement (CCRA) as a Consuming Participant in March 2005, with the intention to become a Certificate Issuing Participant by end-2006. The CCRA is a mutual recognition agreement with signatories from more than 20 countries that are responsible for the maintenance of the CC standard. Singapore is the first in Asean to participate in the CCRA.