What is Isccc Certification

What products does the national information security product certification include?
Answer: See the Announcement No. 7 of 2008 of the General Administration of Quality Supervision, Inspection and Quarantine of the People's Republic of China (hereinafter referred to as "the General Administration of Quality Supervision and Quarantine") and the State Accreditation and Accreditation Supervision and Administration Committee of the People's Republic of China (hereinafter referred to as "the Accreditation and Supervision Committee"): Announcement on Compulsory Certification of Some The Ministry of Finance of the People's Republic of China (hereinafter referred to as "the Ministry of Finance") and the Notice No. 33 of the Accreditation and Supervision Commission of the People's Republic of China in 2009: "Notice on the Implementation Requirements of Mandatory Certification of Information Security Products" and the Notice No. 26 of the Accreditation and Supervision Commission of the People's Republic of China in 2010 "Notice on the Implementation
What are the certification and testing institutions (laboratories) of national information security product certification? Certification and Testing Business Scope?
Answer: See CCRC Announcement No. 3 of 2008: "Notice on Publishing the List of Designated Certification Agencies and First Batch of Laboratories for Compulsory Certification of Information Security Products" and Annex of CCRC Announcement No. 25 of 2009: Certification Agencies and Laboratory Business Scope undertaking Compulsory Certification of Information Security Products.
What is the national information security product certification process?
Answer: The process of national information security product certification is: certification application and acceptance; type test commissioning and implementation; initial factory inspection; evaluation and approval of certification results; supervision after certification.
How to obtain the national information security product certification application?
Answer: Users can obtain it in the following two ways:
Log on to ISCCC website to download the application form.
Go directly to the Product Certification Office of China Information Security Certification Center to collect the application form.
Do you have to fill in the product model/version number in the application form?
Answer: The product model/version number in the application form should be filled in in principle. If the product model/version number is not filled in, the model/version number can not be reflected in the product certification certificate, which leads to the failure to judge whether the product has been certified in the future when using the certificate.
Can I submit an application for certification?
A: Two copies. Two copies can be submitted to the certification center, one of which is transferred from the certification center to the testing laboratory, one to the certification center, and the other to the testing laboratory when the applicant sends the sample, but the consistency of the data should be ensured.
Does the certification application need to be printed?
Answer: The application form needs to be printed and stamped, and the certification material needs to be submitted with a copy and stamp. The technical documents can be submitted in electronic form. If you have any doubts, you can submit the electronic version of the information first, and then formally submit the relevant information after confirmation by the Product Certification Office.
What are the regulations and restrictions on the "applicant" of national information security product certification?
Answer: Producers, manufacturers and importers of products can all act as "applicants".
Scope of issuing certificates for national information security products?
Answer: The China Information Security Product Certification Center issues the National Information Security Product Certificate to the applicant (the client).
Can the applicant entrust others to apply for certification?
A: Yes. When the applicant entrusts others to apply for certification, the trustee shall submit the certification authorization letter to the China Information Security Certification Center.
What information should the applicant provide when applying?
Answer: See the "List of Information to be Submitted in Application for Certification" section of the application form.
How to choose a laboratory?
Answer: According to the announcement No. 25 of the accreditation and Supervision Commission in 2009 on the scope of laboratory testing business, the applicant (the client) has the choice of its own.
How to send samples for type testing for multiple products of the same certification unit?
Answer: Each model needs to be tested by sample delivery. The number of samples delivered by different types of products is different. The specific quantity can be referred to the implementation rules.
How to collect the certification fee and inspection fee?
Answer: The applicant (the client) pays the certification fee and the testing fee to the certification authority and the testing laboratory respectively. The fee refers to the document of the National Development and Reform Commission (NDRC): "Notice of the National Development and Reform Commission on the Re-establishment of Compulsory Product Certification Fee Standards".
How to obtain the standard of national information security product certification?
Answer: The national information security product certification standard is based on the current valid version stipulated in the corresponding product implementation rules. The corresponding standards can be purchased by authorized sales units of national standards. In addition, data backup and recovery, website recovery and anti-spam product certification are based on certification technical specifications, which can be downloaded from the corresponding product download directory of our center website.
How long is the authentication time limit?
Answer: According to the time limit stipulated in the Implementation Rules of Certification for each product, the time limit of certification refers to the actual working day from the date of accepting the application for certification to the time of issuing certification certificate, including the type test time, the time of submitting report after factory inspection, the time of evaluation and approval of certification conclusion and the time of making certificate.
What is factory inspection?
Answer: Factory inspection follows the concept of China's compulsory product certification, which is the same as the internationally accepted definition. The so-called "factory" refers to the place where the final assembly and/or testing of the certified products and the application of certification marks are carried out. Information security products factories include research and development sites.
What are the contents of national information security certification factory inspection?
Answer: The contents of the inspection of the national information security product certification factory are the information security assurance ability, quality assurance ability and product consistency inspection stipulated in the Implementation Rules of the corresponding products.
When Certificate Holders Apply for Increased Products of the Same Category
The production site is inspected by the factory.
What should be done when products in certification certificates are upgraded from low level to high level?
Answer: Laboratories need to conduct high-level full-project testing, without factory inspection, the original certificate should be withdrawn and the product certificate should be re-issued.
How to handle the change of product certificate?
Answer: If only the name of the applicant is changed, it is necessary to fill in the application form for change (attachment can not be submitted), submit a new business license and organization code certificate. In case of product change, technical documents should be submitted and validated or type tested in the laboratory. If the model is added only on the basis of the original certificate, it is necessary to confirm whether it is the same authentication unit. Under what circumstances will China Information Security Certification Center increase the frequency of supervision?
Answer: According to the Implementation Rules of Certification, if one of the following happens, the frequency of supervision can be increased.
When serious quality problems occur in the certified products, or when the user complains and proves to be the responsibility of the certificate holder;
When the China Information Security Product Certification Center has sufficient reasons to question the conformity of certified products with the standard requirements stipulated in these Rules;
When there is enough information to indicate that the factory may affect the quality of products due to changes in organization, production conditions, quality management system, etc.
How long is the validity period of China National Information Security Product Certificate?
A: The validity of the certificate of China's national information security products is five years. The validity of the certificate depends on the regular supervision of the China Information Security Certification Center. What are the contents of the certification results announcement?
Answer: The certification results announcement announces the relevant information of the approved products. The products in the process of certification and those that have not passed the certification are not included in the announcement.
The certification announcement is published on the website of China Information Security Certification Center.
The contents of the announcement include applicant, product name and model/version, certification level, certificate number, issuance time and certificate status.