IT Security Product Compliance Lists

In the context of IT security, a product compliance list (EPL) is a list of IT products that have been assessed and validated by a third-party considering that it meets all the necessary products. These parties are usually generally trusted organizations.

PCL was previously known as evaluated product lists (EPL) by the American public organization Committee on National Security Systems (CNSS).

List of IT Security PCLs

IT security PCLs featured on this post:

  • CCN-STIC 105

CCN-STIC 105

Document CCN-STIC 105 , whose full title is Catálogo de productos de seguridad de las tecnologías de la información y la comunicación, is maintained by Centro Criptológico Nacional of Spain.

It is written in Spanish.

Official link

IT Security Vendor Lists

IT Security Vendor Lists

  • NIST’s FIPS 140-1 and FIPS 140-2 Vendor List

NIST’s FIPS 140-1 and FIPS 140-2 Vendor List

FIPS 140-1 and FIPS-2 are cryptographic standards.

NIST makes a list of providers that use this standard.

Official link

IT Supplier Risk Management

Leave a Reply

Your email address will not be published. Required fields are marked *