Editing Common Criteria (section)

== Testing organizations ==
All [[Common Criteria Testing Laboratory|testing laboratories]] must comply with [[ISO 17025|ISO/IEC 17025]], and certification bodies will normally be approved against ISO/IEC 17065.

The compliance with [[ISO 17025|ISO/IEC 17025]] is typically demonstrated to a National approval authority:
* In Canada, the [[Standards Council of Canada]] (SCC) under Program for the Accreditation of Laboratories (PALCAN) accredits Common Criteria Evaluation Facilities (CCEF)
* In France, the {{ill|Comité français d'accréditation|fr}} (COFRAC) accredits Common Criteria evaluation facilities, commonly called {{ill|Centre d'évaluation de la sécurité des technologies de l'information|fr}} (CESTI). Evaluations are done according to norms and standards specified by the [[Agence nationale de la sécurité des systèmes d'information]] (ANSSI).
* In Italy, the [http://www.ocsi.isticom.it/ OCSI (Organismo di Certificazione della Sicurezza Informatica)] accredits Common Criteria evaluation laboratories
* In India, the STQC Directorate of the [[Ministry of Electronics and Information Technology]] evaluates and certifies IT products at assurance levels EAL 1 through EAL 4.<ref>{{cite web |title=Indian Common Criteria Certification Scheme (IC3S) Overview |url=https://www.commoncriteria-india.gov.in |access-date=2023-12-30}}</ref>
* In the UK the [[United Kingdom Accreditation Service]] (UKAS) used to accredit [http://www.ukas.org/testing Commercial Evaluation Facilities (CLEF)] {{webarchive|url=https://web.archive.org/web/20151028162203/http://www.ukas.org/testing/ |date=2015-10-28}}; the UK is since 2019 only a consumer in the CC ecosystem
* In the US, the [[National Institute of Standards and Technology]] (NIST) [[National Voluntary Laboratory Accreditation Program]] (NVLAP) accredits Common Criteria Testing Laboratories (CCTL)
* In Germany, the [[Bundesamt für Sicherheit in der Informationstechnik]] (BSI)
* In Spain, the [https://oc.ccn.cni.es/index.php?lang=en National Cryptologic Center] (CCN) accredits Common Criteria [http://oc.ccn.cni.es/index.php?option=com_content&view=article&id=82&Itemid=81&lang=en Testing Laboratories] operating in the Spanish Scheme.
* In The Netherlands, the [http://www.tuv-nederland.nl/nl/17/common_criteria.html Netherlands scheme for Certification in the Area of IT Security] (NSCIB) accredits IT Security Evaluation Facilities (ITSEF). 
*In Sweden, the [https://fmv.se/en/Our-activities/CSEC---The-Swedish-Certification-Body-for-IT-Security/ Swedish Certification Body for IT Security] (CSEC) licenses IT Security Evaluation Facilities (ITSEF).

Characteristics of these organizations were examined and presented at ICCC 10.