French evaluation and certification Scheme

Abstract:

The French scheme for evaluation and certification of information technology security has been created in 1995. The French scheme is operated by the French Information security organisation (DCSSI) which is part of the National Defence General Secretariat (SGDN).
Since its creation the French scheme has issued more than 150 certificates on smart cards, systems, networks products and PC products.
The French scheme counts five ITSEFs doing mostly Common Criteria evaluations; the ITSEFs are specialised either in harware of software.
The French scheme enforces French regulation to help the French administration to use secure products, it also works with the major stake holders for certification in order to help them build their risk management on the certification results.