Common Criteria Testing LAP

This page has been established for applicants to the Common Criteria Testing accreditation program. 

Proficiency Testing Requirements 

Laboratories are required to successfully complete a commercial evaluation annually under the oversight of the NIAP validation scheme. Laboratory results are then subject to the NIAP common criteria point system (CCTL). NIAP uses the CCTL system to assign points for issues identified by NIAP during the review of results for each testing/evaluation activity. The laboratory is to maintain a point total of less than 12 points during a defined two-year period of accreditation. The continued demonstration of successfully completing NIAP evaluations serves as a means of demonstrating the validity of test results.

Requirements Documents

• NIST Handbook 150:2020, update 1, NVLAP Procedures and General Requirements
• NIST Handbook 150-20:2014, NVLAP Common Criteria Testing
• Lab Bulletin LB-116-2020: Update to NVLAP accreditation documents for laboratories accredited to ISO/IEC 17025:2017 under the ILAC MRA
• Lab Bulletin LB-107-2018: Supplement to NIST HB 150-20:2014, section 3.3.3 regarding frequency of commercial evaluation and the new section 3.3.4 regarding the use of the common criteria testing lab (CCTL) point system as a means of monitoring technical proficiency. 
• Lab Bulletin LB-104-2017: NIST HB 150-20: Annex B, B.3.a - Program-specific procedures - UPDATE
• Lab Bulletin LB-82-2014: Revision of the NVLAP Common Criteria Testing Laboratory Accreditation Program Handbook, NIST Handbook 150-20

References and Information

• The Common Criteria
• National Information Assurance Partnership (NIAP)