Accredited Testing & Evaluation
COTS Products
The Leidos Accredited Testing & Evaluation Laboratory (NVLAP Code 20047-0) has successfully completed an aggregate of over 1000 Common Criteria and FIPS 140 validations in support of our commercial companies to meet their domestic and international Federal sales acquisition requirements.
AT&E Offerings
-
Common Criteria (ISO 15408) certification is a DoD/NSS/Public sector domestic acquisition requirement and international acquisition requirement in 30 other nations. The lab’s technical proficiency has been recognized by its customer base and the government validators, and as such Leidos has been chosen to conduct the most challenging of certification efforts (most industry 1st certifications). In addition to its industry-leading technical ability, the key differentiator for the Leidos Common Criteria lab is its size which allows it to concurrently process multiple commercial client certification requirements allowing Vendors to get their products to market in the most time and cost-effective manner.
-
CSfC certification is the allowance of your product to be installed into larger commercial systems comprised of CC validated components. The Leidos Common Criteria team works intimately with the Leidos CSfC Trusted Integration Team to seamlessly process the CSfC application as part of the CC evaluation process.
-
Federal Information Processing Standard (FIPS) Publication 140 is a DoD/NSS/Public sector acquisition requirement. Commercial product vendors are required to certify their products’ cryptographic modules (software, hardware, and/or firmware) and cryptographic algorithms before being sold and deployed in these target environments. The Leidos FIPS 140 lab is the industry leader having completed the most certifications in recent years.
-
The Federal Information Processing Standard (FIPS) Publication 201 specifies that Personal Identify Verification (PIV) requirements are necessary for Federal employees and contractors and details those specifications. Leidos’ provides a complete range of PIV testing and support services to test against the requirements defined by GSA's FIPS 201 Evaluation Program (EP) and NIST Personal Identity Verification Program (NPIVP).
-
The Secure Content Automation Protocol (SCAP) tests and monitors systems for security issues such as software deficiencies, configuration issues, and other vulnerabilities. SCAP testing helps to ensure that a computer's configuration is within the guidelines set by the Federal Desktop Core Configuration. Leidos is the industry leader having been the first lab to certify a product against its many iterations.
-
The Leidos AT&E Lab does not solely execute the accredited services listed previously. The lab has successfully leveraged the disciplines of the accreditations themselves, from Common Criteria-based life-cycle audits, Common Criteria-based vulnerability, and pen-testing activities to FIPS 140-2 based Suite-B algorithm testing and FIPS 140-2 source code review to create customized deliverables that meet our client’s unique business needs. A strong technical assessment based upon industry-accepted standards coupled with the industry-leading Leidos brand has been well received for our client’s unique needs. We will be happy to create a new deliverable that meets your unique requirements.
