atsec

The information security provider.

homesitemapblog
  • Services
  • Company
  • News & Events
  • Resources
  • Contact
Deutsch | 汉语

Product Evaluation
and Testing

Common Criteria (ISO/IEC 15408)
FIPS 140-2
Cryptographic Algorithm Testing
SCAP
NPIVP Testing
GSA PIV Evaluation (FIPS 201)

Compliance and Audit
ISO/IEC 27001
SOX and Euro-SOX
FISMA Certification Support
HIPAA and HITECH
NASPO

Consulting and Training
VTDR for GSA FIPS 201
Embedded Systems
Hardware Security Testing and Analysis
Penetration Testing
PCI Consulting
US Export Control for Cryptography
Training

 back to the list of services
 

NASPO Audits

What atsec offers

atsec information security is accredited as a third party auditor for the North American Security Products Organization (NASPO). In this role atsec will conduct audits required to attain Class I, II and III certification under the ANSI/NASPO standard.
atsec has longstanding experience with audits and evaluations under a variety of national and international IT security standards like FISMA risk management framework, PCI DSS and ISO/IEC 27001.

A NASPO audit conducted by atsec information security's experts will focus risks associated with

  • Customers
  • Information
  • Material Risk
  • Supply & Custody Chains
  • Physical Intrusion
  • Personnel
  • Disaster Recovery
  • Security Failure
  • Security Management

Why our services are important to you

NASPO was founded in 2002 by companies and individuals in the security products industry that recognized the need for the control of secure products and technologies. The mission of the North American Security Products Organization, NASPO, is to develop national and international fraud countermeasure and control standards and to certify compliance with those standards in the areas of finance transactions, identity management and material goods. To provide a recognized framework, NASPO created an authoritative set of standards and auditing practices focused on the principle of control using the concept of risk management. It addresses many issues related to a secure supply chain from technology developers to end users.

For more information

Please refer to our resource pages.

 

(c) 2012 atsec information security | Legal Notice | Data Protection Notice | Environmental Policy | Security Policy |  atsec IT security blog atsec on facebook atsec on twitter atsec on LinkedIn atsec on digg.com