atsec information security Evaluates IBM z/OS V1R7

(2006-03-10) atsec information security / Andreas Fabis

atsec information security corporation, an independent, standards-based IT (information technology) security consulting and evaluation services company announced the completion of its security evaluation of the IBM z/OS V1R7. The operating system received Common Criteria (CC) certification at evaluation assurance level (EAL) 4+.

The challenge? Evaluate IBM z/OS, the world’s most complex operating system, at its highest ever level of scrutiny and complete this feat in less than a year. There aren’t more than a handful – a very small handful – of providers with the experience and confidence needed to take on a task of this order. Among that small set of labs, atsec information security stands head and shoulders above the rest as the world’s leading evaluator of large, complex operating systems.

atsec’s reputation for excellence and leadership in the Common Criteria industry is built on its consistent record of success in completing evaluation of complex products at ambitious assurance levels. It’s not surprising that achieving certification of this class of products presents much larger challenges than evaluating simple applications. All aspects of evaluation are more difficult to achieve from design to test. Beyond that, evaluation of large, complex products tests the Common Criteria standard itself. atsec has never shied away from playing a leadership role in working through the inherent limitations of the standard to adapt it for this larger role.

Operating system evaluation is the greatest test of competence in the field, and from early in its history as a Common Criteria evaluation lab, atsec has led the way in operating system evaluations under both the German BSI and U.S. CCEVS Schemes. atsec’s record of evaluation at this level since 2002 includes evaluations of IBM AIX 5.2; six Linux versions on five different platforms; IBM z/OS V1R6 at the EAL3 level, as well as the zSeries-based z/VM and PR/SM virtual machine and logical partitioning products.

For more information please visit:
http://www.atsec.com/01/news-evaluation_ibm_zos_v1r7_common_criteria_certification_eal4-82.html

###

About atsec information security
atsec information security is an independent, standards-based IT (information technology) security consulting and evaluation services company that combines a business-oriented approach to information security with in-depth technical knowledge and global experience. atsec launched its U.S. business in May 2003, building on extensive success in Europe dating back to 2000. atsec leverages its deep security, process, and standards expertise to consult on a wide range of IT security needs, enabling clients to establish integrated security management procedures in order to manage security risk and improve data, product, and business process reliability. atsec works with leading global companies such as IBM, HP, BMW, SGI, Swisscom, RWE, and Vodafone.