1. Copyright atsec information security, 2007 Bringing an Independent, Standards-Based Approach to Global IT Security Consulting and Product Evaluation Staffan Persson, atsec information security

2. Copyright atsec information security, 2007 2 atsec information security  An independent company founded January 11, 2000  Company philosophy (principles): Only doing information security and doing it very well Product independent, no external influence, high integrity Business oriented with technical know-how  Some years of experience: Very long experience in IT Security (several over 20 years) Implemented the first certified ISMS at Vodafone in 2001 A large number of licensings and certifications, E.g. Common Criteria evaluators, BS7799 Lead Auditors, BSI auditors, CISA, CISM  More information: www.atsec.com

3. Copyright atsec information security, 2007 3 atsec locations München Köln Stockholm London Beijing/PR China Austin/Texas Chicago/Illinois

4. Copyright atsec information security, 2007 4 atsec Service Portfolio – Common Criteria Services  Common Criteria is an internationally-recognized standard used by governments and other organizations to assess security and assurance of information technology products.  As a Common Criteria testing lab accredited under 3 different national schemes the U.S. scheme (NIAP) the German scheme (BSI) and the Swedish scheme (CSEC)  atsec offers Common Criteria consulting, readiness assessment, and evaluation services.  We are renowned in the schemes for high quality evaluations, on time project delivery and our knowledge and expertise in the standards  We have over fifty evaluations completed, or in progress from EAL2 to EAL5 in products as diverse as main-frame operating systems to firewalls and web-based applications.  We have lead the field in the evaluation of Linux at EAL4 thought to be impossible for an open source product.

5. Copyright atsec information security, 2007 5 http://www.atsec.com More information...