Giesecke & Devrient (G&D) previously used Applus+ to certify its Chinese and Indian sites according to the requirements set out in the Common Criteria standard for development environments (MSSR).
Applus+ has recently completed its certification of the Giesecke & Devrient
(G&D) development site in Barcelona, which is dedicated to the design of Smart Card software and hardware. This is the third G&D development environment that Applus+ has audited and certified, following audits of the German company’s sites in India and China.
According to Head of Security of GyD Ibérica in Barcelona, “Applus+ showed great professionalism and commitment throughout the evaluation, leading the process and meeting all the objectives that were set when the project was launched”
Applus+ is a recognised laboratory accredited to carry out product evaluation and development site audits to international Common Criteria (ISO 15408) standard, which sets out evaluation assurance levels (EAL) for IT products. Applus+ is also a recognised laboratory within the European SOGIS scheme, for Common Criteria certification
of higher levels in specific technical areas such as Smart Cards
One of the prerequisites of this type of evaluation is to carry out a security audit of the sites in which these products are developed and manufactured, according to the criteria laid down in the Common Criteria “Minimum Site Security Requirements” guide.
Manufacturers and developers such as G&D, with an array of Common Criteria-certified products, can opt for a full certification of their development centres, the results of which can then be included in subsequent Common Criteria evaluations.