Setting up an ISO 19790 Conformity Assessment Body (CAB) (A2a)
Cryptography is the foundation of cybersecurity and therefore cryptographic modules (CM) are the core of the products dedicated to protect assets in any vertical. Therefore, a certification scheme for CMs under the umbrella of the CSA seems to be necessary and the corresponding CAB for substantial level, a must.
This presentation will introduce the establishment process of the CAB, roles and structures and will address issues related to the mechanisms to guarantee the independence Lab/CAB, staff competence, validation methodology for non-standard requirements (algorithms, entropy, non-invasive), possible recognition of external certificates, etc.