|
Secure IT systems are characterised by the fact that the security management and the infrastructure-related, organisational, personal and technical security measures which are needed in order to establish and maintain security are inspected by an independent body and confirmed by means of a system security certificate. As no procedure currently exists which can be used for the testing and certification of IT systems and complex IT products which takes the above measures into consideration, TÜViT has developed the standardised test scheme known as
Security Qualification (SQ)®
Our service
- Analytical procedure which permits efficient inspection of IT systems and complex IT products in an appropriate manner, taking the complexity, the heterogeneous and in particular the dynamic nature of such IT into consideration
- Link between formal evaluations of individual IT products and the security management of a company.
Benefits/Usefulness to you
- Scalability with regard to scope and depth of inspection
- The process can also be used for complex heterogeneous systems
- Comparability of the test result through use of a standardised procedure
- Demonstration of a positive test result by means of a certificate or Trusted Site test mark, both inside the company and to the outside world
- Synergy effect: installation and operation of certified IT products can be certified as an IT system at reduced cost
|
The procedure
- Agreement on the security requirements according to the state of technology in an introductory workshop
- Security analyses and penetration tests on site for IT systems
- Security analyses and penetration tests on sample installations for IT products
- Issue of the certificate following positive conclusion of the tests and publication on the TÜViT website
The objective
- Objective identification of all security risks for the IT product/IT system
- Third parties should have proof that security requirements are fulfilled
- Provision of a comprehensive security statement with regard to your IT systems and/or IT products
- Confirmation of successful completion of the SQ with a certificate and with the Trusted Site Security or Trusted Product Security test mark by the TÜViT Certification Body
You will find a list of the issued Trusted Site Security certificates here.
You will find a list of the issued Trusted Product Security certificates here.
|
