Project News

From August 18 to 20, we had a three-day training course on Common Criteria through an online connection with a Vietnamese expert living in France.

Common Criteria is an international standard for evaluation and certification that IT products and systems are properly designed and correctly and reliably implemented.

Common Criteria has a system whereby products are evaluated by a third party (evaluation organization), and the certification body certifies the results of that evaluation.

In Japan, the Information-technology Promotion Agency (IPA) operates the Common Criteria, and it is used by the government in IT system procurement.

The Common Criteria Recognition Arrangement (CCRA) framework allows to procure IT products that meet intended requirements from a wider range of internationally certified options.

Throughout the three days of training, the core concepts, practical exercises, and the latest status of the Common Criteria were provided by the instructor. There was a lively discussion with the trainees. In particular, they learned about comparisons with other evaluation systems, Security Function Requirements, Security Assurance Requirements, and necessary equipment through classroom lectures and exercises.

In Viet Nam, there are plans to conduct security evaluations in accordance with the Common Criteria. And the project will also provide equipment and support for evaluation techniques and system building by JICA experts in 2021. This training was useful to strengthen the basic knowledge of the personnel in charge of the security evaluation before supporting them.

• IPA : IT Security Evaluation and Certification (external link)