Javascript doesn't seem to be switched on - Some parts of this FMV web site don't function optimal without javascript, check your browser's settings.

This website use cookies. Cookies are used to ensure that the website function in the best way possible. If you continue without changing the settings in your computer you allow cookies to be used. Learn more about cookies and how they are used on this website.

RSS:Subscribe

This is where you are now:

Start / Our activities / CSEC - The Swedish Certificati… / CSEC News / New version of the Swedish Sch…

New version of the Swedish Scheme 2013-10-08

Skip to newslisting

Version 1.15 of the Swedish Scheme has been published and is valid from October, 8th 2013.

All changes are described in the release notes made available on CSEC:s webb.

New model for certification agreements

According to the standard ISO/IEC 17065:2012, applicable since October 1st  2013 for Certification Bodies that certifies products, processer and services, there has to be a legally binding agreement between the Certification Body and its customers.

In conjunction with the introduction of this standard FMV/CSEC introduces a model where certification agreements are established according to the following principles:

  • The sponsor submits a signed application to FMV/CSEC. In this application the sponsor commits to the undertakings specified in the application and generally to the Swedish scheme.
  • FMV/CSEC assesses the application and provides a tender to the sponsor. The certification fee us based on the complexity and the EAL-level of the product according to SP-008 Charges and Fees.
  • The sponsor provides a written acceptance to FMV/CSEC.

The three documents above together forms the legally binding agreement.

The separate agreement document used in previous version of the scheme is not a part of the new model.

Introduction of the new model

The new model is mandatory from January, 2nd 2014, but is also available for use from now on.

To make the application according to the new model the scheme publication SP-196 Certification Application with Terms – Form should be used. For projects were FMV is the sponsor scheme publication SP-199 Certification Application with Terms (FMV) – Form should be used.

For applications according to the previous version of the scheme (still available until January, 2nd 2014), scheme publication SP-010 Certification Application should be used.

Please contact FMV/CSEC for more information.

Changes have been made in:

  • SP-001 Certification and Evaluation Scheme – Scheme Overview
  • SP-002 Evaluation and Certification

New documents:

  • SP-196 Certification Application with Terms – Form
  • SP-199 Certification Application with Terms (FMV) – Form

Modification of meeting structure during certification preparation

A new meeting format, certification start-up meeting, is to be held before the evaluation and certification commence. This meeting is held with all parties involved in the certification and follows a formal agenda. It may only be held once all certification preparations have been completed.  

The certification start-up meeting may be complemented with one or several optional preparatory meetings.

Above structure replace the previous meeting referred to as “initial meeting.

Changes have been made in:

  • SP-002 Evaluation and Certification

New Agreement Model for Licensing

An agreement model similar to the one for certification is introduced for licensing.

In addition, the requirements on trial evaluation has been made more explicit, as have the requirements on evaluator status. A number of other small changes have also been introduced.

Changes have been made in:

  • SP-004 Licensing of Evaluation Facilities

Adaption to the new standard for certification bodies

The new standard, ISO/IEC 17065:2012 has been mandated by the Swedish authority for accreditation and conformity assessment (SWEDAC) and replaces EN 45011:1998.

Some changes of the scheme in order to adapt to the new standard have already been implemented.

Changes have been made in:

  • SP-001 Certification and Evaluation Scheme – Scheme Overview
  • SP-004 Licensing of Evaluation Facilities
  • SP-007 Quality Management

SOGIS-MRA

As previously announced, FMV/CSEC now has been authorized to issue SOGIS-MRA certificates up to evaluation assurance level 4 (EAL 4).
The Scheme has been updated to reflect this.

Changes have been made in:

  • SP-001 Certification and Evaluation Scheme – Scheme Overview
  • SP-002 Evaluation and Certification and SP-007 Quality Management

New guidance document for how to write simplified ST/PP:s included in the scheme

The scheme publication SP-192 Guide för förenklad ST/PP  (in Swedish only) was already available as a guidance document. It is now formally a part of the scheme.

Scheme Note 18: Highlighted requirements on the Security Target

The Security Target is the basis for the evaluation and it must be clear and consistent.

FMV/CSEC has noted that basic requirements on the Security Target frequently are not fulfilled in the early stages of the evaluation.

Scheme note 18 has been established to highlight basic requirements that should be observed by sponsors and evaluators and expected to be addressed in the Security Target (ST).

It is the responsibility of the sponsor and the evaluator that these basic requirements are fulfilled when delivered to CSEC together with the first evaluation report for security target evaluation (ASE).

Furthermore FMV/CSEC recommends that the sponsor and the evaluator ensure that the highlighted requirements are addressed already in the version of the ST attached to the certification application.

See more at CSEC:s webb

 


Hint about this page

Fill in the form to send a link to this page.

Fields marked with * are compulsory.


* The field is compulsory

Published: 2013-10-15 10:23. Changed: 2013-10-15 10:35. Responsible: Show e-mail address.