IPA operates It Security Evaluation and Certification Scheme that evaluates and certifies whether the security of an IT product or a system security is effective and reliable in accordance with the international standard, ISO/IEC 15408. Government bodies and private enterprises use this scheme when procuring IT products. Users benefit when purchasing IT products certified with the international standard, because mutuall recognition of evaluation and certification eliminates the burden of duplicating evaluations of IT products.

 IT systems use various encryption methods to prevent information surveillance and tampering. IPA provides a system to verify and certify whether products that use these encryption methods - e.g. file encryption software and encrypted smart cards - are reliable and safe. This system allows objective evaluation and proof of an encrypted product's reliability and safety when developers and users build encrypted IT systems.

 IPA makes proactive efforts for the international standardization of encryption technology.
 We promote the standardization of Japan's encryption technology and internationally contribute as the international convener (chair) of the ISO/IEC JTC1/ SC27/WG2 (encryption and security mechanisms) committee.