What is Isccc Certification
What products does the national information security product certification include?
Answer: See the Announcement No. 7 of 2008 of the General Administration
of Quality Supervision, Inspection and Quarantine of the People's
Republic of China (hereinafter referred to as "the General
Administration of Quality Supervision and Quarantine") and the State
Accreditation and Accreditation Supervision and Administration Committee
of the People's Republic of China (hereinafter referred to as "the
Accreditation and Supervision Committee"): Announcement on Compulsory
Certification of Some The Ministry of Finance of the People's Republic
of China (hereinafter referred to as "the Ministry of Finance") and the
Notice No. 33 of the Accreditation and Supervision Commission of the
People's Republic of China in 2009: "Notice on the Implementation
Requirements of Mandatory Certification of Information Security
Products" and the Notice No. 26 of the Accreditation and Supervision
Commission of the People's Republic of China in 2010 "Notice on the
Implementation
What are the certification and testing institutions (laboratories) of
national information security product certification? Certification and
Testing Business Scope?
Answer: See CCRC Announcement No. 3 of 2008: "Notice on Publishing the
List of Designated Certification Agencies and First Batch of
Laboratories for Compulsory Certification of Information Security
Products" and Annex of CCRC Announcement No. 25 of 2009: Certification
Agencies and Laboratory Business Scope undertaking Compulsory
Certification of Information Security Products.
What is the national information security product certification process?
Answer: The process of national information security product
certification is: certification application and acceptance; type test
commissioning and implementation; initial factory inspection; evaluation
and approval of certification results; supervision after certification.
How to obtain the national information security product certification application?
Answer: Users can obtain it in the following two ways:
Log on to ISCCC website to download the application form.
Go directly to the Product Certification Office of China Information
Security Certification Center to collect the application form.
Do you have to fill in the product model/version number in the application form?
Answer: The product model/version number in the application form should
be filled in in principle. If the product model/version number is not
filled in, the model/version number can not be reflected in the product
certification certificate, which leads to the failure to judge whether
the product has been certified in the future when using the certificate.
Can I submit an application for certification?
A: Two copies. Two copies can be submitted to the certification center,
one of which is transferred from the certification center to the testing
laboratory, one to the certification center, and the other to the
testing laboratory when the applicant sends the sample, but the
consistency of the data should be ensured.
Does the certification application need to be printed?
Answer: The application form needs to be printed and stamped, and the
certification material needs to be submitted with a copy and stamp. The
technical documents can be submitted in electronic form. If you have any
doubts, you can submit the electronic version of the information first,
and then formally submit the relevant information after confirmation by
the Product Certification Office.
What are the regulations and restrictions on the "applicant" of national information security product certification?
Answer: Producers, manufacturers and importers of products can all act as "applicants".
Scope of issuing certificates for national information security products?
Answer: The China Information Security Product Certification Center
issues the National Information Security Product Certificate to the
applicant (the client).
Can the applicant entrust others to apply for certification?
A: Yes. When the applicant entrusts others to apply for certification,
the trustee shall submit the certification authorization letter to the
China Information Security Certification Center.
What information should the applicant provide when applying?
Answer: See the "List of Information to be Submitted in Application for Certification" section of the application form.
How to choose a laboratory?
Answer: According to the announcement No. 25 of the accreditation and
Supervision Commission in 2009 on the scope of laboratory testing
business, the applicant (the client) has the choice of its own.
How to send samples for type testing for multiple products of the same certification unit?
Answer: Each model needs to be tested by sample delivery. The number of
samples delivered by different types of products is different. The
specific quantity can be referred to the implementation rules.
How to collect the certification fee and inspection fee?
Answer: The applicant (the client) pays the certification fee and the
testing fee to the certification authority and the testing laboratory
respectively. The fee refers to the document of the National Development
and Reform Commission (NDRC): "Notice of the National Development and
Reform Commission on the Re-establishment of Compulsory Product
Certification Fee Standards".
How to obtain the standard of national information security product certification?
Answer: The national information security product certification standard
is based on the current valid version stipulated in the corresponding
product implementation rules. The corresponding standards can be
purchased by authorized sales units of national standards. In addition,
data backup and recovery, website recovery and anti-spam product
certification are based on certification technical specifications, which
can be downloaded from the corresponding product download directory of
our center website.
How long is the authentication time limit?
Answer: According to the time limit stipulated in the Implementation
Rules of Certification for each product, the time limit of certification
refers to the actual working day from the date of accepting the
application for certification to the time of issuing certification
certificate, including the type test time, the time of submitting report
after factory inspection, the time of evaluation and approval of
certification conclusion and the time of making certificate.
What is factory inspection?
Answer: Factory inspection follows the concept of China's compulsory
product certification, which is the same as the internationally accepted
definition. The so-called "factory" refers to the place where the final
assembly and/or testing of the certified products and the application
of certification marks are carried out. Information security products
factories include research and development sites.
What are the contents of national information security certification factory inspection?
Answer: The contents of the inspection of the national information
security product certification factory are the information security
assurance ability, quality assurance ability and product consistency
inspection stipulated in the Implementation Rules of the corresponding
products.
When Certificate Holders Apply for Increased Products of the Same Category
The production site is inspected by the factory.
What should be done when products in certification certificates are upgraded from low level to high level?
Answer: Laboratories need to conduct high-level full-project testing,
without factory inspection, the original certificate should be withdrawn
and the product certificate should be re-issued.
How to handle the change of product certificate?
Answer: If only the name of the applicant is changed, it is necessary to
fill in the application form for change (attachment can not be
submitted), submit a new business license and organization code
certificate. In case of product change, technical documents should be
submitted and validated or type tested in the laboratory. If the model
is added only on the basis of the original certificate, it is necessary
to confirm whether it is the same authentication unit. Under what
circumstances will China Information Security Certification Center
increase the frequency of supervision?
Answer: According to the Implementation Rules of Certification, if one
of the following happens, the frequency of supervision can be increased.
When serious quality problems occur in the certified products, or when
the user complains and proves to be the responsibility of the
certificate holder;
When the China Information Security Product Certification Center has
sufficient reasons to question the conformity of certified products with
the standard requirements stipulated in these Rules;
When there is enough information to indicate that the factory may affect
the quality of products due to changes in organization, production
conditions, quality management system, etc.
How long is the validity period of China National Information Security Product Certificate?
A: The validity of the certificate of China's national information
security products is five years. The validity of the certificate depends
on the regular supervision of the China Information Security
Certification Center. What are the contents of the certification results
announcement?
Answer: The certification results announcement announces the relevant
information of the approved products. The products in the process of
certification and those that have not passed the certification are not
included in the announcement.
The certification announcement is published on the website of China Information Security Certification Center.
The contents of the announcement include applicant, product name and
model/version, certification level, certificate number, issuance time
and certificate status.