Accredited Testing & Evaluation
COTS Products
The Leidos Accredited Testing & Evaluation Laboratory (NVLAP Code 200427-0) has successfully completed an aggregate of over 1000 Common Criteria and FIPS 140 validations in support of our commercial companies to meet their domestic and international Federal sales acquisition requirements.
AT&E Offerings
-
Common Criteria (ISO 15408) certification is a DoD/NSS/Public sector domestic acquisition requirement and international acquisition requirement in 30 other nations. The lab’s technical proficiency has been recognized by its customer base and the government validators, and as such Leidos has been chosen to conduct the most challenging of certification efforts (most industry 1st certifications). In addition to its industry-leading technical ability, the key differentiator for the Leidos Common Criteria lab is its size which allows it to concurrently process multiple commercial client certification requirements allowing Vendors to get their products to market in the most time and cost-effective manner.
-
CSfC certification is the allowance of your product to be installed into larger commercial systems comprised of CC validated components. The Leidos Common Criteria team works intimately with the Leidos CSfC Trusted Integration Team to seamlessly process the CSfC application as part of the CC evaluation process.
-
Federal Information Processing Standard (FIPS) Publication 140 is a DoD/NSS/Public sector acquisition requirement. Commercial product vendors are required to certify their products’ cryptographic modules (software, hardware, and/or firmware) and cryptographic algorithms before being sold and deployed in these target environments. The Leidos FIPS 140 lab is the industry leader having completed the most certifications in recent years.
-
The Secure Content Automation Protocol (SCAP) tests and monitors systems for security issues such as software deficiencies, configuration issues, and other vulnerabilities. SCAP testing helps to ensure that a computer's configuration is within the guidelines set by the Federal Desktop Core Configuration. Leidos is the industry leader having been the first lab to certify a product against its many iterations.
-
Leidos has partnered with the Office of the National Coordinator (ONC) for Health Information Technology. Our pre-certification testing and post-certification reporting services allow Health IT developers to achieve and maintain certification of their Health IT effectively through a long-term partnership approach.
Becoming ONC Certified demonstrates your EHR software has met criteria conformance to the technological capability, functionality, interoperability, and security requirements adopted by the U.S. Department of Health and Human Services (HHS) to support their various programs.
-
The Leidos AT&E Lab does not solely execute the accredited services listed previously. The lab has successfully leveraged the disciplines of the accreditations themselves, from Common Criteria-based life-cycle audits, Common Criteria-based vulnerability, and pen-testing activities to FIPS 140-2 based Suite-B algorithm testing and FIPS 140-2 source code review to create customized deliverables that meet our client’s unique business needs. A strong technical assessment based upon industry-accepted standards coupled with the industry-leading Leidos brand has been well received for our client’s unique needs. We will be happy to create a new deliverable that meets your unique requirements.